Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!news.glorb.com!news.linkpendium.com!news.linkpendium.com!news.iecc.com!.POSTED!nerds-end From: isiisorisiaint@gmail.com Newsgroups: comp.compilers Subject: Re: invitation to discussion: code and protocol obfuscation techniques Date: Wed, 14 Aug 2013 08:20:48 -0700 (PDT) Organization: Compilers Central Lines: 12 Sender: johnl@iecc.com Approved: comp.compilers@iecc.com Message-ID: <13-08-013@comp.compilers> References: <13-08-002@comp.compilers> <13-08-006@comp.compilers> <13-08-008@comp.compilers> <13-08-010@comp.compilers> <13-08-011@comp.compilers> NNTP-Posting-Host: news.iecc.com Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 X-Trace: leila.iecc.com 1376602385 20199 64.57.183.58 (15 Aug 2013 21:33:05 GMT) X-Complaints-To: abuse@iecc.com NNTP-Posting-Date: Thu, 15 Aug 2013 21:33:05 +0000 (UTC) Injection-Date: Wed, 14 Aug 2013 15:20:48 +0000 Keywords: code Posted-Date: 15 Aug 2013 17:33:05 EDT X-submission-address: compilers@iecc.com X-moderator-address: compilers-request@iecc.com X-FAQ-and-archives: http://compilers.iecc.com Xref: csiph.com comp.compilers:959 Found something that bears some resemblance with my half-trusted execution environment, so i'll list it here maybe others will find it useful: http://www.google.com/search?q=%22Exploiting+Code+Mobility+for+Dynamic+Binary+Obfuscation%22+pdf A couple of links on generic code obfuscation techniques: * http://www.google.com/search?q=%22A+taxonomy+of+obfuscating+transformations%22+pdf * https://www.google.com/search?q=%22Code+Obfuscation+against+Static+and+Dynamic+Reverse+Engineering%22+pdf A link on proactive obfuscation as a moving target defense: * http://www.google.com/search?q="Proactive+Obfuscation"+microsoft+pdf Finally, a link on protocol de-obfuscation: * http://www.google.com/search?q="Polyglot%3A+Automatic+Extraction+of+Protocol"+carnegie+pdf