Advanced Code Evolution Techniques and Computer Virus Generator Kits

Short Description
Finally, we will look at computer virus. generator kits … Chapter 7-Advanced Code Evolution Techniques and Computer Virus Generator Kits …

Website: www.informit.com | Filesize: 580kb

Content
251
CHAPTER 7
Advanced Code Evolution
Techniques and Computer
Virus Generator Kits
“In mathematics you don’t understand things. You just get used to them.”
-John von Neumann
304543_ch07.qxd 1/7/05 9:02 AM Page 251In this chapter you will learn about the advanced self-protection techniques computer
virus writers have developed over the years to fight back against scanners.
In particular, you will learn about encrypted, oligomorphic, polymorphic1, and
advanced metamorphic computer viruses2. Finally, we will look at computer virus
generator kits3 that use similar techniques to create different-looking virus
variants.
7.1 Introduction
We will examine the various ways in which virus writers have challenged our
scanning products over the last decade. Although most of these techniques are
used to obfuscate file-infector viruses, we can surely expect similar techniques to
appear in future computer worms.
Over the years, code evolution has come a long way in binary viruses. If someone
were to trace the development result of viruses, it might appear that almost
everything possible has already been done, and problems are not escalating.
However, there are still computing distribution models that have not yet been seen
in viruses.
7.2 Evolution of Code
Virus writers continually challenge antivirus products. Their biggest enemies are
the virus scanner products that are the most popular of current antivirus software.
Generic AV solutions, such as integrity checking and behavior blocking, never…