Mastering Machine Learning for Penetration Testing

Evasion techniques

Attackers and malware developers are continuously coming up with new techniques and methods to avoid detection. Some of the most common techniques are:

• Obfuscation: This is the practice of making the malware more difficult to detect or analyze. Dead-code insertion, register reassignment, and crypting are three obfuscation techniques.

• Binding: This is the practice of binding a malware with a legitimate file, resulting in a single executable.
• Packing: A packer, sometimes called a self-extracting archive, is a software that unpacks itself in memory when the packed file is executed.