Packing-Box: Improving Detection of Executable Packing
(2024) Black Hat Arsenal Europe 2024 — Location: London (11.December.2024)
Files
eu24-dhondt-packingbox.pdf
Open Access - Adobe PDF
- 3.04 MB
Details
- Authors
- Abstract
- This Docker image is an experimental toolkit gathering analyzers, detectors, packers, tools and machine learning machinery for making datasets of packed executables and training machine learning models for the static detection of executable packing applied to multiple formats (including PE, ELF and Mach-O) and for studying the best features that can be used in learning-based static detectors. Furthermore, it currently holds various functionalities to focus on supervised, unsupervised or even adversarial learning and is constantly being improved for extending its capabilities.
- Affiliations
Citations
D’Hondt, A., Bertrand Van Ouytsel, C.-H., Legay, A., & Van Mechelen, A. (2024). Packing-Box: Improving Detection of Executable Packing. Black Hat Arsenal Europe 2024, London. https://hdl.handle.net/2078.5/236761