Browse > Article
http://dx.doi.org/10.12673/jkoni.2013.17.5.545

A Study on Generic Unpacking to Prevent Zombie Client on Mobile Platform  

Ko, Jong-Bin (Division of Computer Engineering, Ajou University)
Lee, Sang-Ha (Department of Information and Communication, Dong Seoul University)
Shon, Tae-Shik (Department of Information and Computer Engineering, Ajou University)
Abstract
Packed technique makes difficult to respond quickly because the malicious-code is reduced size that easy to diffusion and changed code that make spend longer time for analysis. In this paper, we analysed the packing tool softwares and we proposed construction and detection methods of the packed technique for easy to analysis of the packed malicious code based on variation of entropy value.
Keywords
Packed technique; Malicious code; Zombie client;
Citations & Related Records
연도 인용수 순위
  • Reference
1 Virus Total. http://www.virustotal.com/
2 WildList. http://www.wildlist.org
3 PEID. http://www.peid.info
4 AT4RE(Arab Team 4 Reverse Engineering). http://www.at4re.com
5 Robert Lyda, James Hamrock, "Using Entropy Analysis to Find Encrypted and Packed Malware,"IEEE Security and Privacy, Vol. 5, no. 2, pp. 40-45, Mar/Apr, 2007.
6 Thomas M. Cover and Joy A. Thomas, "Elements of Information Theory," Second Edition. Wiley Interscience, New York, NY, 2006.