Detecting Hydan: Statistical Methods For Classifying The Use Of Hydan Based Stegonagraphy In Executable Files

It is known that HYDAN changes the statistical distribution of Sub and Add calls in the assembly code to embed the 'hidden data'. Before this paper, there were no publicly released tools or methods available to detect HYDAN. The methods previously used to detect HYDAN have been inefficient and ...

By

July 3, 2008

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Cybersecurity Insights

Computer Security Resources

A collection of paid and free Computer Security Resources from SANS.

Cybersecurity Insights

20 Coolest Cyber Security Careers

We've all been talking about The Skills Gap for some time now, but what does this mean, what effect does this have on global organizations, and is there anything we can we do about it?According to the Cyber security Jobs Report, the demand to fill roles within the information security industry is...

Cybersecurity Insights

December 7, 2020

SANS Zoom Backgrounds

Download our Zoom backgrounds!