Introduction to SinJAR (a new tool for reverse engineering Java applications) and tracing its malicious actions using hidden Markov models / Jaouhar Fattahi ... [et al.]. : D68-10/118-2017E-PDF

"In this paper, we are proposing a new tool for reversing Java applications called SinJAR. SinJAR is a lightweight software written in Java aiming at inspecting bytecode at compile time and producing the structure tree of a targeted application. Besides, it is able to detect vulnerabilities and security weaknesses inside the Java code. SinJAR can be used for two purposes. The first one is sane and consists in using it to verify whether or not an application is safe and compliant with its specification. The second one is malicious and consists in spying applications through their bytecode and exploiting vulnerabilities that they may enclose. In this paper, we will show how to detect SinJAR malicious actions after showing the capabilities of the tool through few ad hoc attack scenarios conducted in a real military context”--Abstract.

Lien permanent pour cette publication :
publications.gc.ca/pub?id=9.854523&sl=1

• Format MARC XML
• Format MARC HTML

Demander des formats alternatifs