Title:
DEVICE FOR AUTOMATICALLY IDENTIFYING ANTI-ANALYSIS TECHNIQUES BY USING SIGNATURE EXTRACTION, AND METHOD THEREFOR
Document Type and Number:
WIPO Patent Application WO/2020/050455
Kind Code:
A1
Abstract:
The present invention relates to a device for automatically identifying anti-analysis techniques by using signature extraction, and a method therefor. The device for automatically identifying anti-analysis techniques by using signature extraction, according to the present invention, comprises: an extraction unit which extracts a DEX file and ELF file from an application file after unpacking the application file, which is in an APK format and includes compressed execution code to be executed on Android; a parsing unit which decompiles the extracted DEX file and ELF file and parses the decompiled files to acquire signatures; a detection unit which receives inputs of the acquired signatures classified according to types of the signatures, analytically compares the input signatures with signatures stored in a database, and detects signatures having been used in anti-analysis techniques; and a determination unit for determining according to the detected signatures what anti-analysis technique has been applied to the application. According to the present invention, an application to which an anti-analysis technique has been applied can be automatically identified, with the result that time for analysis is reduced. Therefore, it is possible to adequately and speedily deal with damage inflicted by malicious applications.
Inventors:
YI JEONG HYUN (KR)
KANG MIN KOO (KR)
KANG MIN KOO (KR)
Application Number:
PCT/KR2018/014602
Publication Date:
March 12, 2020
Filing Date:
November 26, 2018
Export Citation:
Assignee:
FOUNDATION SOONGSIL UNIV INDUSTRY COOPERATION (KR)
International Classes:
G06F21/56
Foreign References:
| KR20170089859A | 2017-08-04 | |||
| KR20170068814A | 2017-06-20 | |||
| KR20140114769A | 2014-09-29 | |||
| KR101623096B1 | 2016-05-23 | |||
| KR101518420B1 | 2015-05-07 |
Attorney, Agent or Firm:
TAEBAEK INTELLECTUAL PROPERTY LAW FIRM (KR)
Download PDF: