An Overview of the Endless Battle between Virus Writers and Detectors: How Compilers Can Be Used as an Evasion Technique

Michele Ianni, Elio Masciari, Domenico Saccà

2019

Abstract

The increasing complexity of new malware and the constant refinement of detection mechanisms are driving malware writers to rethink the malware development process. In this respect, compilers play a key role and can be used to implement evasion techniques able to defeat even the new generation of detection algorithms. In this paper we provide an overview of the endless battle between malware writers and detectors and we discuss some considerations on the benefits of using high level languages and even exotic compilers (e.g. single instruction compilers) in the process of writing malicious code.

Download


Paper Citation


in Harvard Style

Ianni M., Masciari E. and Saccà D. (2019). An Overview of the Endless Battle between Virus Writers and Detectors: How Compilers Can Be Used as an Evasion Technique.In Proceedings of the 8th International Conference on Data Science, Technology and Applications - Volume 1: DATA, ISBN 978-989-758-377-3, pages 203-208. DOI: 10.5220/0007922802030208


in Bibtex Style

@conference{data19,
author={Michele Ianni and Elio Masciari and Domenico Saccà},
title={An Overview of the Endless Battle between Virus Writers and Detectors: How Compilers Can Be Used as an Evasion Technique},
booktitle={Proceedings of the 8th International Conference on Data Science, Technology and Applications - Volume 1: DATA,},
year={2019},
pages={203-208},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0007922802030208},
isbn={978-989-758-377-3},
}


in EndNote Style

TY - CONF

JO - Proceedings of the 8th International Conference on Data Science, Technology and Applications - Volume 1: DATA,
TI - An Overview of the Endless Battle between Virus Writers and Detectors: How Compilers Can Be Used as an Evasion Technique
SN - 978-989-758-377-3
AU - Ianni M.
AU - Masciari E.
AU - Saccà D.
PY - 2019
SP - 203
EP - 208
DO - 10.5220/0007922802030208