Comprehensive shellcode detection using runtime heuristics
Published • Dec 6, 2010
NobleIDNI2P29W41R85S20
Authors:,,
Michalis Polychronakis
Kostas G. Anagnostakis
Evangelos P. Markatos
Abstract
A promising method for the detection of previously unknown code injection attacks is the identification of the shellcode that is part of the attack vector using payload execution. Existing systems based on this approach rely on the self-decrypting behavior of polymorphic code and can identify only t...
Finding related papers...
Discussions
(0)No comments yet
Be the first to share your thoughts!