GPU-assisted malware

Giorgos Vasiliadis; Michalis Polychronakis; Sotiris Ioannidis

doi:10.1109/MALWARE.2010.5665801

GPU-assisted malware

Giorgos Vasiliadis
, Michalis Polychronakis
, Sotiris Ioannidis

Computer Science

Foundation for Research and Technology-Hellas

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

18 Scopus citations

Abstract

Malware writers constantly seek new methods to obfuscate their code so as to evade detection by virus scanners. Two code-armoring techniques that pose significant challenges to existing malicious-code detection and analysis systems are unpacking and run-time polymorphism. In this paper, we demonstrate how malware can increase its robustness against detection by taking advantage of the ubiquitous Graphics Processing Unit. We have designed and implemented unpacking and run-time polymorphism for a GPU, and tested them using existing graphics hardware. We also discuss how upcoming GPU features can be utilized to build even more robust, evasive, and functional malware.

Original language	English
Title of host publication	Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010
Pages	1-6
Number of pages	6
DOIs	https://doi.org/10.1109/MALWARE.2010.5665801
State	Published - 2010
Event	5th International Conference on Malicious and Unwanted Software, Malware 2010 - Nancy, France Duration: Oct 19 2010 → Oct 20 2010

Publication series

Name	Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010

Conference

Conference	5th International Conference on Malicious and Unwanted Software, Malware 2010
Country/Territory	France
City	Nancy
Period	10/19/10 → 10/20/10

Access to Document

10.1109/MALWARE.2010.5665801

Cite this

@inproceedings{b408945c775d45ca8cef8941fef5f727,

title = "GPU-assisted malware",

abstract = "Malware writers constantly seek new methods to obfuscate their code so as to evade detection by virus scanners. Two code-armoring techniques that pose significant challenges to existing malicious-code detection and analysis systems are unpacking and run-time polymorphism. In this paper, we demonstrate how malware can increase its robustness against detection by taking advantage of the ubiquitous Graphics Processing Unit. We have designed and implemented unpacking and run-time polymorphism for a GPU, and tested them using existing graphics hardware. We also discuss how upcoming GPU features can be utilized to build even more robust, evasive, and functional malware.",

author = "Giorgos Vasiliadis and Michalis Polychronakis and Sotiris Ioannidis",

year = "2010",

doi = "10.1109/MALWARE.2010.5665801",

language = "English",

isbn = "9781424493555",

series = "Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010",

pages = "1--6",

booktitle = "Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010",

note = "5th International Conference on Malicious and Unwanted Software, Malware 2010 ; Conference date: 19-10-2010 Through 20-10-2010",

}

Vasiliadis, G, Polychronakis, M & Ioannidis, S 2010, GPU-assisted malware. in Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010., 5665801, Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010, pp. 1-6, 5th International Conference on Malicious and Unwanted Software, Malware 2010, Nancy, France, 10/19/10. https://doi.org/10.1109/MALWARE.2010.5665801

GPU-assisted malware. / Vasiliadis, Giorgos; Polychronakis, Michalis; Ioannidis, Sotiris.
Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010. 2010. p. 1-6 5665801 (Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - GPU-assisted malware

AU - Vasiliadis, Giorgos

AU - Polychronakis, Michalis

AU - Ioannidis, Sotiris

PY - 2010

Y1 - 2010

N2 - Malware writers constantly seek new methods to obfuscate their code so as to evade detection by virus scanners. Two code-armoring techniques that pose significant challenges to existing malicious-code detection and analysis systems are unpacking and run-time polymorphism. In this paper, we demonstrate how malware can increase its robustness against detection by taking advantage of the ubiquitous Graphics Processing Unit. We have designed and implemented unpacking and run-time polymorphism for a GPU, and tested them using existing graphics hardware. We also discuss how upcoming GPU features can be utilized to build even more robust, evasive, and functional malware.

AB - Malware writers constantly seek new methods to obfuscate their code so as to evade detection by virus scanners. Two code-armoring techniques that pose significant challenges to existing malicious-code detection and analysis systems are unpacking and run-time polymorphism. In this paper, we demonstrate how malware can increase its robustness against detection by taking advantage of the ubiquitous Graphics Processing Unit. We have designed and implemented unpacking and run-time polymorphism for a GPU, and tested them using existing graphics hardware. We also discuss how upcoming GPU features can be utilized to build even more robust, evasive, and functional malware.

UR - https://www.scopus.com/pages/publications/78651410940

U2 - 10.1109/MALWARE.2010.5665801

DO - 10.1109/MALWARE.2010.5665801

M3 - Conference contribution

AN - SCOPUS:78651410940

SN - 9781424493555

T3 - Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010

SP - 1

EP - 6

BT - Proceedings of the 5th IEEE International Conference on Malicious and Unwanted Software, Malware 2010

T2 - 5th International Conference on Malicious and Unwanted Software, Malware 2010

Y2 - 19 October 2010 through 20 October 2010

ER -

GPU-assisted malware

Abstract

Publication series

Conference

Access to Document

Other files and links

Fingerprint

Cite this