scholarly journals Evasion and Countermeasures Techniques to Detect Dynamic Binary Instrumentation Frameworks

Author(s):  
Ailton Dos Santos Fh ◽  
Ricardo J. Rodríguez ◽  
Eduardo L. Feitosa

Dynamic Binary Instrumentation (DBI) is a dynamic analysis technique that allows arbitrary code to be executed when a program is running. DBI frameworks have started to be used to analyze malicious applications. As a result, different approaches have merged to detect and avoid them. Commonly referred to as split personality malware or evasive malware are pieces of malicious software that incorporate snippets of code to detect when they are under DBI framework analysis and thus mimic benign behavior. Recent studies have questioned the use of DBI in malware analysis, arguing that it increases the attack surface. In this paper, we examine the anti-instrumentation techniques that abuse desktop-based DBI frameworks and existing countermeasures to determine if it is possible to reduce the exploitable attack surface introduced by these DBI frameworks. In particular, we review the related literature to identify (i) the existing set of DBI framework evasion techniques and (ii) the existing set of countermeasures to avoid them. We also analyze and compare the taxonomies introduced in the literature, and propose a new taxonomy that expands and completes previous taxonomies. We also note some relevant issues and outline ways of future research in the use of DBI frameworks for security purposes

Information ◽  
2021 ◽  
Vol 12 (3) ◽  
pp. 118
Author(s):  
Vassilios Moussas ◽  
Antonios Andreatos

Malware creators generate new malicious software samples by making minor changes in previously generated code, in order to reuse malicious code, as well as to go unnoticed from signature-based antivirus software. As a result, various families of variations of the same initial code exist today. Visualization of compiled executables for malware analysis has been proposed several years ago. Visualization can greatly assist malware classification and requires neither disassembly nor code execution. Moreover, new variations of known malware families are instantly detected, in contrast to traditional signature-based antivirus software. This paper addresses the problem of identifying variations of existing malware visualized as images. A new malware detection system based on a two-level Artificial Neural Network (ANN) is proposed. The classification is based on file and image features. The proposed system is tested on the ‘Malimg’ dataset consisting of the visual representation of well-known malware families. From this set some important image features are extracted. Based on these features, the ANN is trained. Then, this ANN is used to detect and classify other samples of the dataset. Malware families creating a confusion are classified by a second level of ANNs. The proposed two-level ANN method excels in simplicity, accuracy, and speed; it is easy to implement and fast to run, thus it can be applied to antivirus software, smart firewalls, web applications, etc.


2021 ◽  
pp. 147737082110006
Author(s):  
Wim Hardyns ◽  
Thom Snaphaan ◽  
Sara Willems ◽  
Lieven J. R. Pauwels

This study examines the ecological reliability, convergent validity and ecological stability of neighbourhood (dis)organizational processes measured by means of two methods: inhabitant surveys and the so-called key informant analysis technique. Considering that ecological processes play a major role in many contemporary criminological theories and research, it is vital to take into account methodological challenges and to question the reliability, validity and stability of the measures reflecting these underlying processes. (Dis)organizational processes are predominantly measured by means of questionnaires surveying neighbourhood inhabitants. To yield ecologically reliable and valid measures this approach requires large numbers of respondents. In this study we analyse the relationships between ecological measures of neighbourhood processes based on surveys of inhabitants versus key informants. The findings suggest that key informants can provide reliable, valid and stable measures of (dis)organizational neighbourhood processes. Therefore, the key informant analysis technique is an essential complementary, or even substitutive, method in the measurement of neighbourhood processes; shared survey-method variance is eliminated and it is possible to survey fewer key informants than inhabitants to obtain reliable and valid information on social trust and disorder. Nevertheless, this method is not suitable for measuring all neighbourhood processes, such as informal social control. Therefore, outstanding challenges and avenues for future research are discussed as well.


2021 ◽  
Vol 13 (3) ◽  
pp. 1464
Author(s):  
Patrick Brandtner ◽  
Farzaneh Darbanian ◽  
Taha Falatouri ◽  
Chibuzor Udokwu

The COVID-19 pandemic has been one of the biggest disruptive events of recent decades and has had a global effect on society and the economy. The political regulations resulting from COVID-19 also led to significant changes in physical grocery shopping. However, the specific impact of COVID-19 on consumer satisfaction at the customer end of retail supply chains, i.e., the point-of-sale (PoS), has not yet been addressed. By gathering and analyzing consumer satisfaction data (ratings) and sentiments (evaluation comments) available on the open web, the current study evaluates the impact of COVID-19 on consumer satisfaction at the PoS. Focusing on the five biggest retail chains in Austria, the results show that there was a general and significant decline in consumer satisfaction due to the pandemic. The results also show a high impact of political regulations on consumer satisfaction. Furthermore, the text-mining based analysis of evaluation comments indicate that store layout and facilities, as well as product availability and waiting time had a great impact on consumer satisfaction. In total, over 533,000 consumer satisfaction ratings and over 153,000 textual comments have been analyzed, providing the basis for a comprehensive and sound discussion of the impact of COVID-19 on consumer satisfaction and perceptions. Future research could focus on applying the used data analysis technique and the adapted consumer sentiment dimensions in different settings, such as countries other than Austria or smaller retail chains.


BMJ Leader ◽  
2021 ◽  
pp. leader-2020-000403
Author(s):  
Victoria Smith ◽  
Claire Maxwell ◽  
Lisa Robinson

ObjectivesSelection of effective leadership styles within healthcare is linked to high quality, safe care for patients. Within the literature attention has been given to medical and nursing professions, failing to acknowledge the contribution made by physiotherapy leaders. This study aims to consider the leadership styles used by physiotherapists in a designated leadership role, specifically exploring the barriers they face and the strategies employed to overcome current leadership dilemmas.DesignA qualitative, phenomenological design was used. Consent was obtained from each participant for one semistructured interview which was audio recorded and transcribed verbatim. Framework analysis was used to analyse the data.SettingA large National Health Service Foundation Trust within the North East of England.ParticipantsA purposive sample of ten physiotherapy team leaders.ResultsThe theoretical leadership framework that emerged demonstrated the daily tensions experienced by physiotherapy team leaders in regard to being a transactional or transformational leader. Within this, three superordinate themes exist: the individual, the team and the organisation and beyond. Each theme contained barriers and enablers which related to transactional and transformational leadership styles, respectively.ConclusionsThe framework identified gives insight into a group of clinical leaders not yet explored and provides a foundation for the development of leadership behaviours throughout physiotherapy. These clinicians should be supported by senior leaders to develop more transformational styles which have the potential to impact on staff well-being and patient care. Future research should compare these findings with studies involving larger sample sizes that span the health and social care system.


2017 ◽  
Vol 1 (2) ◽  
pp. 195-207
Author(s):  
Ruby Ketsiama Meijer P ◽  
Hendra Gunawan

This study aims to examine the effect of enterprise resource planning implementation on the performance of manufacturing companies moderated by the size of companies listed on the IDX period 2013-2015. Company size is seen through sales and total assets.  Samples were taken by using purposive sampling and meeting the sample criteria.  The analysis technique used in this research is multiple regression analysis.  The results show that the implementation of enterprise resource planning significantly affects the company's performance is reinforced by high sales level and also affect the company's performance significantly reinforced by a large asset. The high sales and total assets can improve the performance of companies implementing ERP.  Both of these factors have a significant influence.  The results of this study are expected to add to the research literature on the factors that strengthen the performance of manufacturing companies that implement ERP. Future research can change the size of the company viewed from the income or the number of employees.Keywords: Enterprise performance, enterprise resource planning, sales, total assets


2021 ◽  
Vol 4 (1) ◽  
pp. 88-99
Author(s):  
Mahide Özçelik ◽  
Mukaddes Sakallı Demirok

  The aim of this study is to examine the current research trends in graduate theses on preschool inclusion in Turkey. Document analysis technique, one of the qualitative research methods, was used in the research. It was carried out on 31 graduate theses, which were obtained as a result of scanning the thesis archive of the Higher Education Council (YÖK) and were open to access between 2016 to 2020. The search was carried out by typing "pre-school integration" into the search engine of the Higher Education Institution's thesis archive. The theses included in the study were analyzed using the thesis analysis form prepared beforehand by the researchers. In the prepared form, the theses were analyzed according to the year, thesis level, university, institute, department, thesis supervisor title, research model, number of participants, data collection tool, data analysis method, and domestic and foreign references. The findings obtained within the framework of the examination were interpreted with percentage and frequency tables, and recommendations were made for future research. Key Words: Mainstreaming, preschool, thesis, document analysis.


2018 ◽  
Vol 19 ◽  
pp. 242-254
Author(s):  
Ahmad Adeel ◽  
Samreen Batool ◽  
Rizwan Ali

This study investigated the relationship between empowering leadership and team creativity by integrating the theory of group behavior with componential theory of creativity. For this study, data was collected from two sources (343 Subordinates, 67 Supervisors) by temporally dividing data collection process into two points in time for independent, dependent, and mediating variables from employees of a bank operating in Pakistan. Random coefficient analysis technique was used with Mplus 7.0 to analyze nested data for preliminary analysis and analysis of mediation and indirect effects. Mediation was analyzed using the indirect effect of random models and further confirmed the confidence using bootstrapping procedure. Through this study, the researchers tried to explore the inconsistent relationship between empowering leadership behavior and team creativity. It was found that empowering leadership behavior affects the team level creativity of employees directly and indirectly through the mediation of team learning behavior and team psychological empowerment as team process and team emergent states respectively. The results indicated that empowering leadership enhances the learning potential of teams and team empowerment perception which in turn enhances team level creativity. Further research findings, implications, and future research directions also discussed in this research.


2021 ◽  
Vol ahead-of-print (ahead-of-print) ◽  
Author(s):  
Ali Ziaee Bigdeli ◽  
Kawaljeet Kapoor ◽  
Andreas Schroeder ◽  
Omid Omidvar

PurposeThis paper explains how servitization disrupts long-established internal and external boundaries of product-focused manufacturers and investigates the root causes of servitization challenges.Design/methodology/approachThe authors draw from the collective experiences of 20 senior executives from ten multinational manufacturers involved in servitization, using a multiple case study approach, and employ a codebook thematic analysis technique.FindingsThe authors develop an integrative framework based on the theoretical notions of power, competency and identity boundaries to offer insights into the root causes of various servitization-related challenges.Research limitations/implicationsAlthough the extant literature discusses servitization challenges, it does not examine the underlying root causes that create them in the first place. This study contributes to the extant research by establishing rational links between organisational boundaries (internal and external) and servitization challenges in the interest of building a coherent and systematically integrated body of theory that can be successfully applied and built upon by future research.Practical implicationsThis study provides a foundation for managers to recognise, anticipate and systematically manage various boundary-related challenges triggered by servitization.Originality/valueIt is one of the first studies to employ the concept of organisational boundary to understand the challenges created by servitization and to account for both internal (between different functions of the same organisation) and external boundaries (between an organisation and its external stakeholders) to establish a holistic understanding of the impacts of servitization on manufacturers.


Sign in / Sign up

Export Citation Format

Share Document