Papers and Presentations
As the papers for and presentations given at the CARO Workshop may contain restricted information, it is up to the presenter to share their paper and or presentation. The material of those who have done so at this moment can be found below...
Emulation: how low will you go..., Kurt Natvig, Norman ASA, Norway Presentation
Anti-unpacker tricks, Peter Ferrie, Microsoft, USA Paper Presentation
Anti-Emulation Through Time-Lock Puzzles, Tim Ebringer, Witham Laboratories, Australia Paper
IDA Pro & obfuscated code, Ilfak Guilfanov, Hex-Rays, Belgium Presentation
Hump-and-dump: efficient generic unpacking using an ordered address execution histogram,
Li Sun, RMIT University, Australia and Tim Ebringer, Witham Laboratories, Australia Paper Presentation
Unpacking, an hybrid approach, Mario A. López, Frisk Software Intl., Iceland Paper
Automatic Browser Script Deobfuscation and Analysis, Jose Nazario, Ph.D., Arbor Networks, USA Presentation
Runtime Packer Testing Experiences, Maik Morgenstern & Andreas Marx, AV-Test.org Presentation
Exepacker blacklisting: theory and experiences, Gabor Szappanos, Virusbuster Ltd., Hungary Presentation
Dealing with Virtualization packers, Boris Lau, Sophos Plc, United Kingdom Presentation