Name
Abstract | ||
|---|---|---|
We present a new approach that bridges binary analysis techniques with machine learning classification for the purpose of providing a static and generic evaluation technique for opaque predicates, regardless of their constructions. We use this technique as a static automated deobfuscation tool to remove the opaque predicates introduced by obfuscation mechanisms. According to our experimental results, our models have up to 98% accuracy at detecting and deobfuscating state-of-the-art opaque predicates patterns. By contrast, the leading edge deobfuscation methods based on symbolic execution show less accuracy mostly due to the SMT solvers constraints and the lack of scalability of dynamic symbolic analyses. Our approach underlines the efficiency of hybrid symbolic analysis and machine learning techniques for a static and generic deobfuscation methodology.
|
Year | DOI | Venue |
|---|---|---|
2019 | 10.1145/3338503.3357719 | Proceedings of the 3rd ACM Workshop on Software Protection |
Keywords | Field | DocType |
deobfuscation, machine learning, obfuscation, opaque predicate, software protection, symbolic execution | Programming language,Computer science,Binary analysis,Opacity,Predicate (grammar) | Conference |
ISSN | ISBN | Citations |
3rd International Workshop on Software PROtection, Nov 2019,
London, United Kingdom | 978-1-4503-6835-3 | 0 |
PageRank | References | Authors |
0.34 | 0 | 4 |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Ramtine Tofighi-Shirazi | 1 | 0 | 0.34 |
| Irina-Mariuca Asavoae | 2 | 0 | 0.34 |
| Philippe Elbaz-Vincent | 3 | 2 | 1.45 |
| Thanh-Ha Le | 4 | 0 | 0.34 |