Danny Quist's guest appearances

Danny Quist

Black Hat Briefings, USA 2007 [Video] Presentations from the security conference.

Black Hat Briefings, USA 2007 [Audio] Presentations from the security conference.

Krishna Kurapati

Chris Palmer

Keith Jones

Mark Ryan

Bruce Schneier

Tony Sager

Mark Dowd

David Byrne

Rob King

Jennifer Granick

Robert Graham

John McDonald

Mike Perry

Robert Hansen

Jamie Butler

OwlTail

Software armoring techniques have increasingly created problems for reverse engineers and software analysts. As protections such as packers, run-time obfuscators, virtual machine and debugger detectors become common newer methods must be developed to cope with them. In this talk we will present our covert debugging platform named Saffron. Saffron is based upon dynamic instrumentation techniques as well as a newly developed page fault assisted debugger. We show that the combination of these two techniques is effective in removing armoring from the most advanced software armoring systems. As a demonstration we will automatically remove packing protections from malware.

Danny Quist & Valsmith: Covert Debugging: Circumventing Software Armoring Techniques