Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.compilers > #959

Re: invitation to discussion: code and protocol obfuscation techniques

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.glorb.com!news.linkpendium.com!news.linkpendium.com!news.iecc.com!.POSTED!nerds-end
From isiisorisiaint@gmail.com
Newsgroups comp.compilers
Subject Re: invitation to discussion: code and protocol obfuscation techniques
Date Wed, 14 Aug 2013 08:20:48 -0700 (PDT)
Organization Compilers Central
Lines 12
Sender johnl@iecc.com
Approved comp.compilers@iecc.com
Message-ID <13-08-013@comp.compilers> (permalink)
References <13-08-002@comp.compilers> <B5FEE00B53CF054AA8439027E8FE17751EFB7508@IMCMBX04.MITRE.ORG> <13-08-006@comp.compilers> <13-08-008@comp.compilers> <13-08-010@comp.compilers> <13-08-011@comp.compilers>
NNTP-Posting-Host news.iecc.com
Mime-Version 1.0
Content-Type text/plain; charset=ISO-8859-1
X-Trace leila.iecc.com 1376602385 20199 64.57.183.58 (15 Aug 2013 21:33:05 GMT)
X-Complaints-To abuse@iecc.com
NNTP-Posting-Date Thu, 15 Aug 2013 21:33:05 +0000 (UTC)
Injection-Date Wed, 14 Aug 2013 15:20:48 +0000
Keywords code
Posted-Date 15 Aug 2013 17:33:05 EDT
X-submission-address compilers@iecc.com
X-moderator-address compilers-request@iecc.com
X-FAQ-and-archives http://compilers.iecc.com
Xref csiph.com comp.compilers:959

Show key headers only | View raw


Found something that bears some resemblance with my half-trusted execution environment, so i'll list it here maybe others will find it useful: http://www.google.com/search?q=%22Exploiting+Code+Mobility+for+Dynamic+Binary+Obfuscation%22+pdf

A couple of links on generic code obfuscation techniques:
* http://www.google.com/search?q=%22A+taxonomy+of+obfuscating+transformations%22+pdf
* https://www.google.com/search?q=%22Code+Obfuscation+against+Static+and+Dynamic+Reverse+Engineering%22+pdf

A link on proactive obfuscation as a moving target defense:
* http://www.google.com/search?q="Proactive+Obfuscation"+microsoft+pdf

Finally, a link on protocol de-obfuscation:
* http://www.google.com/search?q="Polyglot%3A+Automatic+Extraction+of+Protocol"+carnegie+pdf

Back to comp.compilers | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

invitation to discussion: code and protocol obfuscation techniques "Gyll ." <isiisorisiaint@gmail.com> - 2013-08-01 14:49 +0300
  RE: invitation to discussion: code and protocol obfuscation techniques "Costello, Roger L." <costello@mitre.org> - 2013-08-03 20:58 +0000
  Re: invitation to discussion: code and protocol obfuscation techniques glen herrmannsfeldt <gah@ugcs.caltech.edu> - 2013-08-04 03:41 +0000
  Re: invitation to discussion: code and protocol obfuscation techniques "Gyll ." <isiisorisiaint@gmail.com> - 2013-08-05 13:42 +0300
  Re: invitation to discussion: code and protocol obfuscation techniques "Gyll ." <isiisorisiaint@gmail.com> - 2013-08-05 15:44 +0300
    Re: invitation to discussion: code and protocol obfuscation techniques glen herrmannsfeldt <gah@ugcs.caltech.edu> - 2013-08-06 19:09 +0000
      Re: invitation to discussion: code and protocol obfuscation techniques isiisorisiaint@gmail.com - 2013-08-08 03:24 -0700
        Re: invitation to discussion: code and protocol obfuscation techniques glen herrmannsfeldt <gah@ugcs.caltech.edu> - 2013-08-08 14:41 +0000
          Re: invitation to discussion: code and protocol obfuscation techniques isiisorisiaint@gmail.com - 2013-08-14 08:20 -0700
          Re: invitation to discussion: code and protocol obfuscation techniques Gene Wirchenko <genew@telus.net> - 2013-08-20 19:05 -0700

csiph-web