USUI Toshinori
,
IKUSE Tomonori
,
OTSUKI Yuto
,
KAWAKOYA Yuhei
,
IWAMURA Makoto
,
MIYOSHI Jun
,
MATSUURA Kanta
… (2) Static approaches generate false positives because they use heuristic patterns. … In this paper, we propose a method for statically detecting ROP chains in malicious data by learning the target libraries (i.e., the libraries that are used for ROP gadgets). … Our method accelerates its inspection by exhaustively collecting feasible ROP gadgets in the target libraries and learning them separated from the inspection step. …
J-STAGE