Evaluating model checking for cyber threats code obfuscation identification

摘要: Abstract Code obfuscation is a set of transformations that make code programs harder to understand. The goal reverse engineering infeasible, while maintaining the logic on program. Originally, it has been used protect intellectual property. However, recently also by malware writers in order cyber threats easily able evade antimalware scanners. As matter fact, metamorphic and polymorphic viruses exhibit ability obfuscate their as they propagate. In this paper we propose model checking-based approach which identify most widespread obfuscating techniques, without making any assumptions about nature obfuscations used. We evaluate proposed method real-world dataset obtaining an accuracy equal 0.9 identification techniques.