Metode skrivanja i reverzni inženjering zlonamjernog programskog koda

master's thesis

• Title (english): Obfuscation and reverse engineering of malware code
• Author: Andrej Jurić
• Mentor: Miljenko Mikuc (mentor)
• Committee member: Miljenko Mikuc (predsjednik povjerenstva)
• Committee member: Krešimir Pripužić (član povjerenstva)
• Committee member: Marin Vuković (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2019-09-12, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Electrical Engineering

Abstract

Zlonamjerni program (eng. malware) jest svaki program specifično dizajniran u svrhu nanošenja štete zaraženom sustavu, bilo da je riječ o ometanju njegova rada, preuzimanju kontrole ili krađi podataka kroz bilo kakav oblik neovlaštenog pristupa. U svrhu izbjegavanja detekcije, zlonamjerni programi skrivaju svoj kod zbog čega ih je u praksi nemoguće zagarantirano otkriti putem automatiziranih rješenja kao što su antivirusni programi. Stoga se u računarstvu svakodnevno koristi reverzni inženjering kao glavna metoda analize novih prijetnji, te razvoja novijih i učinkovitijih rješenja za njihovu detekciju. U okviru ovog rada predstavljene su i implementirane metode skrivanja kao i detekcije alata za analizu malicioznih programa, te su potom izneseni rezultati i zapažanja.

Abstract (english)

Malicious program, or simply malware, is any program specifically designed for the purpose of disrupting infected systems, either by interfering with their normal functioning, taking control of them or stealing data through any kind of unauthorized access. To avoid detection, malicious programs obfuscate their code which makes foolproof detection via automated solutions such as antivirus software impossible. That is the reason why reverse engineering is used in everyday computing as a main method of analyzing new threats and development of better and more effective solutions for their detection. Within this work, different methods of obfuscation and detection of malware analysis tools have been implemented after which results and observations have been presented.

• Keywords: maliciozni program; detekcija; skrivanje
• Keywords (english): malware; detection; obfuscation
• Language: croatian
• URN:NBN: urn:nbn:hr:168:459525
• Study programme: Title: Information and Communication Technology; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije (magistar/magistra inženjer/inženjerka informacijske i komunikacijske tehnologije)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2020-01-07 18:52:14