The design and implementation of pin plugin tool to bypass anti-debugging techniques

Soohwa Hong; Yongsu Park

The design and implementation of pin plugin tool to bypass anti-debugging techniques

Soohwa Hong, Yongsu Park, Journal of Internet Computing and Services, Vol. 17, No. 5, pp. 33-42, Oct. 2016

10.7472/jksii.2016.17.5.33, Full Text:

Keywords: Anti-debugging, Pin, Dynamic Analysis, Protector, Reverse engineering

Abstract

Pin is a framework that creates dynamic program analysis tools and can be used to perform program analysis on user space in Linux and Windows. It is hard to analyze the program such as Anti-reversing program or malware using anti-debugging by Pin. In this paper, we will suggest the implementation of scheme bypassing anti-debugging with Pin. Each pin code is written to bypass anti-debugging detecting Pin. And Pin creates a pin tool combined with Pin codes that bypass anti-debugging methods. The pin tool are tested with files created by anti-debugging protector. The technique in the paper is expected to be a reference of code bypassing anti-debugging and be applied to bypass newly discovered anti-debugging through code modification in the future.

Statistics

Show / Hide Statistics

Statistics (Cumulative Counts from November 1st, 2017)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.

Cite this article

[APA Style]

Hong, S. & Park, Y. (2016). The design and implementation of pin plugin tool to bypass anti-debugging techniques. Journal of Internet Computing and Services, 17(5), 33-42. DOI: 10.7472/jksii.2016.17.5.33.

[IEEE Style]

S. Hong and Y. Park, "The design and implementation of pin plugin tool to bypass anti-debugging techniques," Journal of Internet Computing and Services, vol. 17, no. 5, pp. 33-42, 2016. DOI: 10.7472/jksii.2016.17.5.33.

[ACM Style]

Soohwa Hong and Yongsu Park. 2016. The design and implementation of pin plugin tool to bypass anti-debugging techniques. Journal of Internet Computing and Services, 17, 5, (2016), 33-42. DOI: 10.7472/jksii.2016.17.5.33.