Binary Instrumentation for Reversing Automation

2020 ◽  
pp. 871-895
Author(s):  
Abhijit Mohanta ◽  
Anoop Saldanha
Keyword(s):  
Binary Instrumentation

GPU Instruction Hotspots Detection Based on Binary Instrumentation Approach

2019 ◽  
Vol 68 (8) ◽  
pp. 1213-1224 ◽  
Author(s):  
Anton V. Gorshkov ◽  
Michael Berezalsky ◽  
Julia Fedorova ◽  
Konstantin Levit-Gurevich ◽  
Noam Itzhaki
Keyword(s):  
Binary Instrumentation

scholarly journals Evasion and Countermeasures Techniques to Detect Dynamic Binary Instrumentation Frameworks

2021 ◽  
Author(s):  
Ailton Dos Santos Fh ◽  
Ricardo J. Rodríguez ◽  
Eduardo L. Feitosa
Keyword(s):  
Future Research ◽  
Malware Analysis ◽  
Framework Analysis ◽  
Malicious Software ◽  
Binary Instrumentation ◽  
Analysis Technique ◽  
Dynamic Binary Instrumentation ◽  
Split Personality ◽  
Attack Surface ◽  
Evasive Malware

Dynamic Binary Instrumentation (DBI) is a dynamic analysis technique that allows arbitrary code to be executed when a program is running. DBI frameworks have started to be used to analyze malicious applications. As a result, different approaches have merged to detect and avoid them. Commonly referred to as split personality malware or evasive malware are pieces of malicious software that incorporate snippets of code to detect when they are under DBI framework analysis and thus mimic benign behavior. Recent studies have questioned the use of DBI in malware analysis, arguing that it increases the attack surface. In this paper, we examine the anti-instrumentation techniques that abuse desktop-based DBI frameworks and existing countermeasures to determine if it is possible to reduce the exploitable attack surface introduced by these DBI frameworks. In particular, we review the related literature to identify (i) the existing set of DBI framework evasion techniques and (ii) the existing set of countermeasures to avoid them. We also analyze and compare the taxonomies introduced in the literature, and propose a new taxonomy that expands and completes previous taxonomies. We also note some relevant issues and outline ways of future research in the use of DBI frameworks for security purposes

Sign in / Sign up

Export Citation Format

Share Document