Academic Journal
View in EDS

Generic Reverse Compilation to Recognize Specific Behavior.

Bibliographic Details
Title: Generic Reverse Compilation to Recognize Specific Behavior.
Authors: Durfina, Lukáš
Source: Information Sciences & Technologies: Bulletin of the ACM Slovakia; 2015, Vol. 7 Issue 1, p9-18, 10p
Subject Terms: Malware, Computer software, Decompilers (Computer programs)
Abstract: This extended abstract of the doctoral thesis introduces the recognition of specific behavior by generic reverse compilation. The generic reverse compilation is a process that transforms executables from different architectures and object file formats to the same high level language. This process is covered by a tool Lissom Decompiler. For a purpose of behavior recognition, we introduce Language for Decompilation -- LfD. LfD represents a simple imperative language, which is suitable for a comparison. The specific behavior is given by the known executable (e.g. malware) and the recognition is performed as finding the ratio of similarity with other unknown executable. This ratio of similarity is calculated by a tool LfD Comparator, which processes two LfD sources to decide their similarity. [ABSTRACT FROM AUTHOR]
Copyright of Information Sciences & Technologies: Bulletin of the ACM Slovakia is the property of STU Press and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Complementary Index
FullText Text:
  Availability: 0
Header DbId: edb
DbLabel: Complementary Index
An: 116768116
RelevancyScore: 837
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 837.160217285156
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Generic Reverse Compilation to Recognize Specific Behavior.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Durfina%2C+Lukáš%22">Durfina, Lukáš</searchLink>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: Information Sciences & Technologies: Bulletin of the ACM Slovakia; 2015, Vol. 7 Issue 1, p9-18, 10p
– Name: Subject
  Label: Subject Terms
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Malware%22">Malware</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+software%22">Computer software</searchLink><br /><searchLink fieldCode="DE" term="%22Decompilers+%28Computer+programs%29%22">Decompilers (Computer programs)</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: This extended abstract of the doctoral thesis introduces the recognition of specific behavior by generic reverse compilation. The generic reverse compilation is a process that transforms executables from different architectures and object file formats to the same high level language. This process is covered by a tool Lissom Decompiler. For a purpose of behavior recognition, we introduce Language for Decompilation -- LfD. LfD represents a simple imperative language, which is suitable for a comparison. The specific behavior is given by the known executable (e.g. malware) and the recognition is performed as finding the ratio of similarity with other unknown executable. This ratio of similarity is calculated by a tool LfD Comparator, which processes two LfD sources to decide their similarity. [ABSTRACT FROM AUTHOR]
– Name: Abstract
  Label:
  Group: Ab
  Data: <i>Copyright of Information Sciences & Technologies: Bulletin of the ACM Slovakia is the property of STU Press and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=edb&AN=116768116
RecordInfo BibRecord:
  BibEntity:
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 10
        StartPage: 9
    Subjects:
      – SubjectFull: Malware
        Type: general
      – SubjectFull: Computer software
        Type: general
      – SubjectFull: Decompilers (Computer programs)
        Type: general
    Titles:
      – TitleFull: Generic Reverse Compilation to Recognize Specific Behavior.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Durfina, Lukáš
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 06
              Text: 2015
              Type: published
              Y: 2015
          Identifiers:
            – Type: issn-print
              Value: 13381237
          Numbering:
            – Type: volume
              Value: 7
            – Type: issue
              Value: 1
          Titles:
            – TitleFull: Information Sciences & Technologies: Bulletin of the ACM Slovakia
              Type: main
ResultId 1