Malware Obfuscation Techniques: A Brief Survey
Abstract
As the obfuscation is widely used by malware writers to evade antivirus scanners, so it becomes important to analyze how this technique is applied to malwares. This paper explores the malware obfuscation techniques while reviewing the encrypted, oligomorphic, polymorphic and metamorphic malwares which are able to avoid detection. Moreover, we discuss the future trends on the malware obfuscation techniques.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Dead code insertion is one of the most common techniques for code obfuscation.
“Dead code insertion is one of the most common techniques for code obfuscation (You and Yim, 2010)”
From ReACC: A Retrieval-Augmented Code Completion Framework (2022) · cites this paper as You and Yim, 2010
Cited by
Sorted by citations
SoK: Taxonomy of Attacks on Open-Source Software Supply Chains
Ladisa, P., Plate, H., Martinez, M., & Barais, O. (2023) · 2023 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp46215.2023.10179304 · Cited by 208 · see citing works
Exploiting Programmatic Behavior of LLMs: Dual-Use Through Standard Security Attacks
Kang, D., Li, X., Stoica, I., Guestrin, C., Zaharia, M., & Hashimoto, T. (2024) · 2024 IEEE Security and Privacy Workshops (SPW) · doi:10.1109/spw63631.2024.00018 · Cited by 114 · see citing works
ReACC: A Retrieval-Augmented Code Completion Framework
Lu, S., Duan, N., Han, H., Guo, D., Hwang, S.-W., & Svyatkovskiy, A. (2022) · arXiv · doi:10.48550/arxiv.2203.07722 · Cited by 96 · see citing works
“In software engineering, dead code insertion is one of the most common techniques for code obfuscation (You and Yim, 2010), whose goal is to modify a code to make it hard to understand but remain its functionality, which is similar to our goal.”
Background
- Authors
- You, I., & Yim, K.
- Affiliations
- Korean Bible University (KR)
- Soonchunhyang University (KR)
- Venue
- 2010 International Conference on Broadband, Wireless Computing, Communication and Applications
- Publisher
- IEEE
- Published
- 2010-11
- Pages
- 297-300
- OpenAlex
- W2024170198
- Cited by
- 607
- References
- 0
- Citations by year
- 2026: 26 · 2025: 37 · 2024: 36 · 2023: 54 · 2022: 50 · 2021: 66 · 2020: 51 · 2019: 59 · 2018: 50 · 2017: 46 · 2016: 29 · 2015: 37 · 2014: 23 · 2013: 22 · 2012: 16
- FWCI
- 15.42
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Broadband and Wireless Computing, Communication and Applications (BWCCA) (publishedVersion)
- Topics
- Physical Sciences › Computer Science › Signal Processing › Advanced Malware Detection Techniques
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Physical Sciences › Computer Science › Information Systems › Software Engineering Research
- Keywords
- malware obfuscation, antivirus evasion, polymorphic malware, metamorphic malware
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
