PowerDrive: Accurate De-obfuscation and Analysis of PowerShell Malware-Reference-Cited by-同舟云学术

PowerDrive: Accurate De-obfuscation and Analysis of PowerShell Malware

Published:2019 Issue: Volume: Page:240-259
ISSN:0302-9743
Container-title:Detection of Intrusions and Malware, and Vulnerability Assessment
language:
Short-container-title:

Author:

Ugarte Denis,Maiorca Davide,Cara Fabrizio,Giacinto Giorgio

Publisher

Springer International Publishing

Link

http://link.springer.com/content/pdf/10.1007/978-3-030-22038-9_12

Reference32 articles.

1. Anckaert, B., Madou, M., Sutter, B.D., Bus, B.D., Bosschere, K.D., Preneel, B.: Program obfuscation: a quantitative approach. In: Proceedings of the 2007 ACM Workshop on Quality of Protection, QoP 2007, pp. 15–20. ACM, New York (2007)

2. Bichsel, B., Raychev, V., Tsankov, P., Vechev, M.: Statistical deobfuscation of android applications. In: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, CCS 2016, pp. 343–355. ACM, New York (2016)

3. Bohannon, D.: Invoke-obfuscation. https://github.com/danielbohannon/Invoke-Obfuscation

4. Bohannon, D., Holmes, L.: Revoke-obfuscation (2017). https://github.com/danielbohannon/Revoke-Obfuscation

5. Bohannon, D., Holmes, L.: Revoke-obfuscation: powershell obfuscation detection using science (2017). https://www.fireeye.com/content/dam/fireeye-www/blog/pdfs/revoke-obfuscation-report.pdf

Cited by 19 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Oblivion: an open-source system for large-scale analysis of macro-based office malware;Journal of Computer Virology and Hacking Techniques;2024-07-02

2. Machine Learning Approaches to Malicious PowerShell Scripts Detection and Feature Combination Analysis;網際網路技術學刊;2024-01

3. PowerDetector: Malicious PowerShell script family classification based on multi-modal semantic fusion and deep learning;China Communications;2023-11

4. A Survey of Detection Methods Research on Living-Off-The-Land Techniques;2023 IEEE International Conference on Sensors, Electronics and Computer Engineering (ICSECE);2023-08-18

5. Short- versus long-term performance of detection models for obfuscated MSOffice-embedded malware;International Journal of Information Security;2023-08-14