Advanced antivirus evasion techniques
| dc.contributor.advisor | Ξενάκης, Χρήστος | |
| dc.contributor.advisor | Νταντογιάν, Χριστόφορος | |
| dc.contributor.author | Πούλιος, Γεώργιος | |
| dc.date.accessioned | 2016-09-27T09:11:26Z | |
| dc.date.available | 2016-09-27T09:11:26Z | |
| dc.date.issued | 2015 | |
| dc.identifier.uri | https://dione.lib.unipi.gr/xmlui/handle/unipi/9122 | |
| dc.format.extent | 34 | el |
| dc.language.iso | en | el |
| dc.publisher | Πανεπιστήμιο Πειραιώς | el |
| dc.rights | Attribution-NonCommercial-NoDerivatives 4.0 Διεθνές | * |
| dc.rights.uri | http://creativecommons.org/licenses/by-nc-nd/4.0/ | * |
| dc.subject | Computer security | el |
| dc.title | Advanced antivirus evasion techniques | el |
| dc.type | Master Thesis | el |
| dc.contributor.department | Σχολή Τεχνολογιών Πληροφορικής και Επικοινωνιών. Τμήμα Ψηφιακών Συστημάτων | el |
| dc.description.abstractEN | In this thesis we examine the use of Return-Oriented Programming (ROP) combined with other practices for local (i.e. infected executables on disk) antivirus evasion. ROP is considered as a polymorphism alternative to crypters and packers. The software product of this work is a tool written in Win32 C which, given any piece of shellcode and any non-packed 32-bit Portable Executable (PE) file, it transforms the shellcode into its ROP equivalent and patches it into (i.e. infects) the PE file. After trying various combinations of evasion techniques, the results show that certain methods can evade nearly and completely all antivirus software employed in the online VirusTotal service. From a theoretical standpoint, the main outcome of this research is a) the algorithms for analysis and manipulation of assembly code on the x86 instruction set (up to and excluding the SSE), and b) the highlighting of common antivirus software weaknesses. | el |
| dc.contributor.master | Τεχνοοικονομική Διοίκηση και Ασφάλεια Ψηφιακών Συστημάτων | el |
| dc.subject.keyword | Antivirus | el |
| dc.subject.keyword | Evasion techniques | el |
Αρχεία σε αυτό το τεκμήριο
Αυτό το τεκμήριο εμφανίζεται στις ακόλουθες συλλογές
-
Τμήμα Ψηφιακών Συστημάτων
Department of Digital Systems
Εκτός από όπου διευκρινίζεται διαφορετικά, το τεκμήριο διανέμεται με την ακόλουθη άδεια:
Attribution-NonCommercial-NoDerivatives 4.0 Διεθνές
Attribution-NonCommercial-NoDerivatives 4.0 Διεθνές