Web Security.pptVIP

JSGuard (2) It’s hard to fool our method: [20] Shellcode can use JS code execution environment information to fool other dynamic analysis approaches Our design leverages system’s context information Shellcode can use target process’s virtual memory information to fool other dynamic analysis approaches Our design uses target processes’ virtual memory information Shellcode can avoid GetPC code to fool other dynamic analysis approaches Our method does not rely on GetPC code for detection. We leverage real virtual memory content to decode instructions and emulate their execution JSGuard (3) JSGu