Anti-Reverse Engineering 기법 정리

http://dhdh1.springnote.com/pages/3299025

1. PEB.BeingDebugged Flag: IsDebuggerPresent()
2. PEB.NtGlobalFlag,Heap.HeapFlags,Heap.ForceFlags
3. CheckRemoteDebuggerPresent() / NtQueryInformationProcess()
4. Debugger Interrupts
5. Timing Check
6. SeDebugPrivilege
7. Parent Process
8. NtQueryObject
9. Debugger Windows Search
10. Debugger Process Search
11. Device Driver 이름으로 검색
12. OllyDbg:Guard Pages
13. Checksum
14. Garbage Code And Code Permutation
15. Anti-Disassembly
16. Misdirection and Stopping Execution via Exception
17. Blocking Input
18. ThreadHideFromDebugger
19. Unhandled Exception Filter
20. OutputDebugString()
21. Process Injection
22. Debugger Blocker
23. TLS Callbacks
24. Stolen Byte
25. API Redirection
26. Multi-Threaded Packer
27. Virtual Machines

밑에 정리된게 조금 중복된거 같아도 이거 공부하면 꽤 도움이 될 듯 합니다. 하나하나~