Antivirus Evasion through Antigenic Variation (Why the Blacklisting Approach to AV is Broken)

DerbyCon 3.0 - All In The Family

Presented by: Trenton Ivey
Date: Friday September 27, 2013
Time: 19:00 - 19:50
Location: Track 4
Track: The 3-Way

Think of the last time you got sick. Your immune system is an amazing piece of machinery, but every now and then, something gets past it. Antivirus evasion techniques can become more effective when modeled after infectious diseases. This talk highlights many of the antivirus evasion techniques in use today. Going further, this talk shows how genetic algorithms can quickly and repeatedly “evolve” code to evade many malicious code detection techniques in use today. Trenton will be releasing a BETA version of a tool for the shellcode Ghostwriting process.

Trenton Ivey

“Trenton has had the desire to understand how things work since early childhood. Hacking, programming, reverse engineering, and electronics quickly became some of his favorite hobbies. Trenton went to college with the hopes of becoming a doctor. After surviving classes like Advanced Genetics, Immunology, Cellular Biology, Biochemistry, and Organic Chemistry, he graduated college with a major in biology and a minor in chemistry. After undergraduate school, Trenton was able to work in a remote Hospital Lab in Zimbabwe, Africa. It was during this time that, through a strange turn of events, he realized his true passion was Information Security. Years later, Trenton now leads the Network Pentesting Team at a Fortune 500 company.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats