Overcoming the obfuscation method of the dynamic name resolution

Overcoming the obfuscation method of the dynamic name resolution

연구 분야: Analysis

학회: ICSIM '22: Proceedings of the 2022 5th International Conference on Software Engineering and Information Management

Using unevaluated obfuscation methods has a significant risk since the methods might have some vulnerabilities. One evaluation for obfuscation is de-obfuscation which discloses the hidden information by the obfuscation. This paper proposed the de-obfuscation method against for DNR (dynamic name resolution) obfuscation method. DNR hides system-defined names by encrypting them and resolves names dynamically during runtime. This paper clarifies the steps of de-obfuscation and proposes static and dynamic manners to de-obfuscate DNR. Through the case study, two ways both succeed in disclosing the hidden information of DNR.