202
2 Computer Viruses, Malicious Logic, and Spyware
Fig. 2.56 Results of inspection of a file with embedded backdoor
protection from the techniques described above. These measures (countermeasures)
will be useful for administrators, malware analysts, and antivirus developers.
Section Privilege Control
When talking about infected files, the first thing that comes to mind is detection
of the anomalies associated with section privileges. By default, compilers never set
Précédent

- 223/839

Suivant