Vaccination - An Anti-Honeypot Approach

Presented at Hackfest 2017, Nov. 3, 2017, 1:30 p.m. (Unknown duration).

Malware often searches for specific artifacts as part of its "anti-­VM\analysis\sandbox\debugging" evasion mechanisms, we will abuse its cleverness against it.

The "anti-­honeypot" approach is a method to repel (instead of luring) attackers, implemented by creating and modifying those artifacts on the potential victim's machine.

Once the created artifacts are found by the malware - it will terminate.

The session will include motivations for attackers to use evasion techniques, some in-­the-­wild examples and effective countermeasures against it.


Presenters:

Links:

Similar Presentations: