Reference no: EM133115287

Problem Statement

Shellcode in Literature

Students are required to answer research questions based on these academic papers

• "Evasion Techniques" Evasion Techniques: Sneaking through Your Intrusion Detection/Prevention Systems by Tsung-Huan Cheng, Ying-Dar Lin, Yuan-Cheng Lai, and Po-Ching Lin
  
• "English Shellcode" by Joshua Mason, Sam Small, Fabian Monrose and Greg MacManus
  
• "Automatic Shellcode Transplant" Your Exploit is Mine: Automatic Shellcode Transplant for Remote Exploits by Tiffany Bao, Ruoyu Wang, Yan Shoshitaishvili, David Brumley
  
• "Polymorphic Shellcode Detection" - Network-Level Polymorphic Shellcode Detection Using Emulation by Michalis Polychronakis, Kostas G. Anagnostakis, and Evangelos P. Markatos

There should be at least four additional references from recent academic (IEEE or ACM) research papers or white papers from IT companies. Students must perform their own research for additional references.

1. Read the paper "Evasion Techniques", explain how a piece of shellcode can bypass an intrusion detection system and list the shellcode issues related to computer forensic investigations.

2. Read the paper "English Shellcode", explain the concept of program counter and its importance to an attacker using shellcodes.

3. In the paper "Automatic Shellcode Transplant", what are the two challenges of the transplanted shellcode?

4. In the paper "Polymorphic Shellcode Detection", what are the advantages and limitations of the proposed detection method?

Attachment:- Problem Statement _Task.rar