@inproceedings{smith_redir_2014,
	address = {Minneapolis, MN, USA},
	title = {{REDIR}: {Automated} static detection of obfuscated anti-debugging techniques},
	isbn = {978-1-4799-5158-1 978-1-4799-5157-4 978-1-4799-5156-7},
	shorttitle = {{REDIR}},
	url = {http://ieeexplore.ieee.org/document/6867561/},
	doi = {10.1109/CTS.2014.6867561},
	abstract = {Reverse Code Engineering (RCE) to detect anti-debugging techniques in software is a very difficult task. Code obfuscation is an anti-debugging technique makes detection even more challenging. The Rule Engine Detection by Intermediate Representation (REDIR) system for automated static detection of obfuscated anti-debugging techniques is a prototype designed to help the RCE analyst improve performance through this tedious task. Three tenets form the REDIR foundation. First, Intermediate Representation (IR) improves the analyzability of binary programs by reducing a large instruction set down to a handful of semantically equivalent statements. Next, an Expert System (ES) ruleengine searches the IR and initiates a sensemaking process for anti-debugging technique detection. Finally, an IR analysis process confirms the presence of an anti-debug technique. The REDIR system is implemented as a debugger plug-in. Within the debugger, REDIR interacts with a program in the disassembly view. Debugger users can instantly highlight anti-debugging techniques and determine if the presence of a debugger will cause a program to take a conditional jump or fall through to the next instruction.},
	language = {en},
	urldate = {2020-05-21},
	booktitle = {2014 {International} {Conference} on {Collaboration} {Technologies} and {Systems} ({CTS})},
	publisher = {IEEE},
	author = {Smith, Adam J. and Mills, Robert F. and Bryant, Adam R. and Peterson, Gilbert L. and Grimaila, Michael R.},
	month = may,
	year = {2014},
	pages = {173--180}
}

{"_id":"CX3EmzRfvxjP5kiSz","bibbaseid":"smith-mills-bryant-peterson-grimaila-redirautomatedstaticdetectionofobfuscatedantidebuggingtechniques-2014","authorIDs":[],"author_short":["Smith, A. J.","Mills, R. F.","Bryant, A. R.","Peterson, G. L.","Grimaila, M. R."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","address":"Minneapolis, MN, USA","title":"REDIR: Automated static detection of obfuscated anti-debugging techniques","isbn":"978-1-4799-5158-1 978-1-4799-5157-4 978-1-4799-5156-7","shorttitle":"REDIR","url":"http://ieeexplore.ieee.org/document/6867561/","doi":"10.1109/CTS.2014.6867561","abstract":"Reverse Code Engineering (RCE) to detect anti-debugging techniques in software is a very difficult task. Code obfuscation is an anti-debugging technique makes detection even more challenging. The Rule Engine Detection by Intermediate Representation (REDIR) system for automated static detection of obfuscated anti-debugging techniques is a prototype designed to help the RCE analyst improve performance through this tedious task. Three tenets form the REDIR foundation. First, Intermediate Representation (IR) improves the analyzability of binary programs by reducing a large instruction set down to a handful of semantically equivalent statements. Next, an Expert System (ES) ruleengine searches the IR and initiates a sensemaking process for anti-debugging technique detection. Finally, an IR analysis process confirms the presence of an anti-debug technique. The REDIR system is implemented as a debugger plug-in. Within the debugger, REDIR interacts with a program in the disassembly view. Debugger users can instantly highlight anti-debugging techniques and determine if the presence of a debugger will cause a program to take a conditional jump or fall through to the next instruction.","language":"en","urldate":"2020-05-21","booktitle":"2014 International Conference on Collaboration Technologies and Systems (CTS)","publisher":"IEEE","author":[{"propositions":[],"lastnames":["Smith"],"firstnames":["Adam","J."],"suffixes":[]},{"propositions":[],"lastnames":["Mills"],"firstnames":["Robert","F."],"suffixes":[]},{"propositions":[],"lastnames":["Bryant"],"firstnames":["Adam","R."],"suffixes":[]},{"propositions":[],"lastnames":["Peterson"],"firstnames":["Gilbert","L."],"suffixes":[]},{"propositions":[],"lastnames":["Grimaila"],"firstnames":["Michael","R."],"suffixes":[]}],"month":"May","year":"2014","pages":"173–180","bibtex":"@inproceedings{smith_redir_2014,\n\taddress = {Minneapolis, MN, USA},\n\ttitle = {{REDIR}: {Automated} static detection of obfuscated anti-debugging techniques},\n\tisbn = {978-1-4799-5158-1 978-1-4799-5157-4 978-1-4799-5156-7},\n\tshorttitle = {{REDIR}},\n\turl = {http://ieeexplore.ieee.org/document/6867561/},\n\tdoi = {10.1109/CTS.2014.6867561},\n\tabstract = {Reverse Code Engineering (RCE) to detect anti-debugging techniques in software is a very difficult task. Code obfuscation is an anti-debugging technique makes detection even more challenging. The Rule Engine Detection by Intermediate Representation (REDIR) system for automated static detection of obfuscated anti-debugging techniques is a prototype designed to help the RCE analyst improve performance through this tedious task. Three tenets form the REDIR foundation. First, Intermediate Representation (IR) improves the analyzability of binary programs by reducing a large instruction set down to a handful of semantically equivalent statements. Next, an Expert System (ES) ruleengine searches the IR and initiates a sensemaking process for anti-debugging technique detection. Finally, an IR analysis process confirms the presence of an anti-debug technique. The REDIR system is implemented as a debugger plug-in. Within the debugger, REDIR interacts with a program in the disassembly view. Debugger users can instantly highlight anti-debugging techniques and determine if the presence of a debugger will cause a program to take a conditional jump or fall through to the next instruction.},\n\tlanguage = {en},\n\turldate = {2020-05-21},\n\tbooktitle = {2014 {International} {Conference} on {Collaboration} {Technologies} and {Systems} ({CTS})},\n\tpublisher = {IEEE},\n\tauthor = {Smith, Adam J. and Mills, Robert F. and Bryant, Adam R. and Peterson, Gilbert L. and Grimaila, Michael R.},\n\tmonth = may,\n\tyear = {2014},\n\tpages = {173--180}\n}\n\n","author_short":["Smith, A. J.","Mills, R. F.","Bryant, A. R.","Peterson, G. L.","Grimaila, M. R."],"key":"smith_redir_2014","id":"smith_redir_2014","bibbaseid":"smith-mills-bryant-peterson-grimaila-redirautomatedstaticdetectionofobfuscatedantidebuggingtechniques-2014","role":"author","urls":{"Paper":"http://ieeexplore.ieee.org/document/6867561/"},"downloads":0,"html":""},"bibtype":"inproceedings","biburl":"https://bibbase.org/zotero/21h","creationDate":"2020-05-22T18:11:30.279Z","downloads":0,"keywords":[],"search_terms":["redir","automated","static","detection","obfuscated","anti","debugging","techniques","smith","mills","bryant","peterson","grimaila"],"title":"REDIR: Automated static detection of obfuscated anti-debugging techniques","year":2014,"dataSources":["NpxDwkFvCjNmGYFSj"]}