NobleBlocks
Public

Comprehensive shellcode detection using runtime heuristics

Published • Dec 6, 2010
NobleIDNI2P29W41R85S20
Authors:
Michalis Polychronakis
,
Kostas G. Anagnostakis
,
Evangelos P. Markatos

Abstract

A promising method for the detection of previously unknown code injection attacks is the identification of the shellcode that is part of the attack vector using payload execution. Existing systems based on this approach rely on the self-decrypting behavior of polymorphic code and can identify only t...

Finding related papers...

Discussions

(0)

No comments yet

Be the first to share your thoughts!