Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What theoretical tools are needed to simplify MBA expressions?

blog.quarkslab.com | research | #reverse-engineering | #obfuscation | #mba | #program-analysis | #deobfuscation | #math

Summary

Why Mixed Boolean-Arithmetic (MBA) expressions are hard to de-obfuscate: the maths behind expressions that mix arithmetic and bitwise operators, and the theoretical tools needed to simplify them.
Published
Collected

original ↗

Related coverage

  1. PhD defense of Ninon Eyrolles: Obfuscation with Mixed Boolean-Arithmetic Expressions: Reconstruction, Analysis and Simplification Tools (blog.quarkslab.com)
  2. PhD Defense of Jonathan Salwan: Use of Symbolic Execution for Binary Deobfuscation (blog.quarkslab.com)
  3. Symbolic Deobfuscation: From Virtualized Code Back to the Original (DIMVA 2018) (blog.quarkslab.com)
  4. Spectre is not a Bug, it is a Feature (blog.quarkslab.com)
  5. Mistreating Triton (blog.quarkslab.com)
  6. Arybo: cleaning obfuscation by playing with mixed boolean and arithmetic operations (blog.quarkslab.com)

back