The first steps in analyzing defensive malware are understanding what obfuscations are
present in real-world malware binaries, how these obfuscations hinder analysis, and how …

Binary rewriting is changing the semantics of a program without having the source code at
hand. It is used for diverse purposes, such as emulation (eg, QEMU), optimization (eg …

Software inspection is a known technique for improving software quality. It involves carefully
examining the code, the design, and the documentation of software and checking these for …

This paper concerns static-analysis algorithms for analyzing x86 executables. The aim of the
work is to recover intermediate representations that are similar to those that can be created …

Disassembly is the process of recovering a symbolic representation of a program's machine
code instructions from its binary representation. Recently, a number of techniques have …

Over the last seven years, we have developed static-analysis methods to recover a good
approximation to the variables and dynamically allocated memory objects of a stripped …

In this paper, we propose a new approach for the static detection of malicious code in
executable programs. Our approach rests on a semantic analysis based on behaviour that …

Security analysis and vulnerability testing results are “pack aged” or “bound to” the actual
software it describes. By linking the results to the software itself, downstream users of the …

Native code is now commonplace within Android app packages where it co-exists and
interacts with Dex bytecode through the Java Native Interface to deliver rich app …

Hackers have uncovered the dark side of cryptography—that device developed to defeat
Trojan horses, viruses, password theft, and other cyber-crime. It's called cryptovirology, the …