00000nam 2200000za 4500 9.807445 CaOODSP 20240219183358 cr ||||||||||| 150723s2015 onc ob f000 0 eng d CaOODSP eng eng fre n-cn--- D68-2/27-2015E-PDF Charland, P. Software fingerprinting for automated assembly code analysis [electronic resource] / P. Charland. [Ottawa] : Defence Research and Development Canada, 2015. vii, 28, [2] p. : fig., tables. Scientific report ; 2015-R027 March 2015. Includes bibliographical references (p. 23-26). With the revolution in information technology, the dependence of the Canadian Armed Forces (CAF) on their information systems continues to grow. While information systems-based assets confer a distinct advantage, they also make the CAF vulnerable if adversaries interfere with those. Unfortunately, the technology required to disrupt and damage an information system through malicious software (malware) is far less sophisticated and expensive than the amount of investment required to create the system. To understand and mitigate this threat, reverse engineering has to be performed to analyze malware. However, software reverse engineering is a manually intensive and time-consuming process. The learning curve to master it is quite steep and once mastered, the process is hindered when anti-reverse engineering techniques are used. This results in the very few available reverse engineers being quickly saturated. This Scientific Report describes new approaches to accelerate the reverse engineering process of malware. The goal is to reduce redundant analysis efforts by automating the identification of code fragments which reuse (i) previously analyzed assembly code or (ii) open source code publicly available. gccst Computer security Defence R&D Canada. Scientific report (Defence R&D Canada) 2015-R027 (CaOODSP)9.802305 PDF 1.40 MB https://publications.gc.ca/collections/collection_2015/rddc-drdc/D68-2-27-2015-eng.pdf DRDC-RDDC-2015-R027