Attackers' obfuscation techniques make it difficult to detect kernel rootkits merely by looking at symbol-table information. The authors show how software developers can use obfuscation techniques to fight commercial-software reverse engineering and illegal distribution of their products by attackers.
Index Terms:
software obfuscation, reverse engineering, malicious code, rootkits
Citation:
Sandra Ring, Eric Cole, "Taking a Lesson from Stealthy Rootkits," IEEE Security and Privacy, vol. 2, no. 4, pp. 38-45, July 2004, doi:10.1109/MSP.2004.57