Papers and Presentations As the papers for and presentations given at the CARO Workshop may contain restricted information, it is up to the presenter to share their paper and or presentation. The material of those who have done so at this moment can be found below... Emulation: how low will you go..., Kurt Natvig, Norman ASA, Norway Presentation Anti-unpacker tricks, Peter Ferrie, Microsoft, USA Paper Presentation Anti-Emulation Through Time-Lock Puzzles, Tim Ebringer, Witham Laboratories, Australia Paper IDA Pro & obfuscated code, Ilfak Guilfanov, Hex-Rays, Belgium Presentation Hump-and-dump: efficient generic unpacking using an ordered address execution histogram, Li Sun, RMIT University, Australia and Tim Ebringer, Witham Laboratories, Australia Paper Presentation Unpacking, an hybrid approach, Mario A. López, Frisk Software Intl., Iceland Paper Automatic Browser Script Deobfuscation and Analysis, Jose Nazario, Ph.D., Arbor Networks, USA Presentation Runtime Packer Testing Experiences, Maik Morgenstern & Andreas Marx, AV-Test.org Presentation Exepacker blacklisting: theory and experiences, Gabor Szappanos, Virusbuster Ltd., Hungary Presentation Dealing with Virtualization packers, Boris Lau, Sophos Plc, United Kingdom Presentation |