English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Zendy Plus

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Zendy Tools

Zendy Open

The strength of obfuscated software has increased over the recent years.Compiler based obfuscation has become the de facto standard in the industry andrecent papers also show that injection of obfuscation techniques is done at thecompiler level. In this paper we discuss a generic approach for deobfuscationand recompilation of obfuscated code based on the compiler framework LLVM. Weshow how binary code can be lifted back into the compiler intermediate languageLLVM-IR and explain how we recover the control flow graph of an obfuscatedbinary function with an iterative control flow graph construction algorithmbased on compiler optimizations and SMT solving. Our approach does not make anyassumptions about the obfuscated code, but instead uses strong compileroptimizations available in LLVM and Souper Optimizer to simplify away theobfuscation. Our experimental results show that this approach can be effectiveto weaken or even remove the applied obfuscation techniques like constantunfolding, certain arithmetic-based opaque expressions, dead code insertions,bogus control flow or integer encoding found in public and commercialobfuscators. The recovered LLVM-IR can be further processed by customdeobfuscation passes that are now applied at the same level as the injectedobfuscation techniques or recompiled with one of the available LLVM backends.The presented work is implemented in a deobfuscation tool called SATURN.

SATURN -- Software Deobfuscation Framework Based on LLVM