In this project, we proposed a novel framework to investigate the VM-based Android packers with the following advantages:
- An cross-layer dyanmic intrumention approach for monitor the behaviors of VMs;
- An novel symbolic-based approach to reverse-engineer the customized VMs;
- An new semantic analysis approach to recognize the semantics of the new customized bytecode.
For more details, please refer to the following paper.
@inproceedings{xue2021parema,
title={Parema: an unpacking framework for demystifying VM-based Android packers},
author={Xue, Lei and Yan, Yuxiao and Yan, Luyi and Jiang, Muhui and Luo, Xiapu and Wu, Dinghao and Zhou, Yajin},
booktitle={Proceedings of the 30th ACM SIGSOFT International Symposium on Software Testing and Analysis},
pages={152--164},
year={2021}
}