Question: Which statement is not TRUE regarding encrypted data identification? 1 One of the main features of antivirus software is to detect malware using signatures. 2
Which statement is not TRUE regarding encrypted data identification?
| 1 | One of the main features of antivirus software is to detect malware using signatures. |
| 2 | Simple signature detection can easily be defeated by encrypting the data and/or code of a malware. |
| 3 | Under dynamic analysis, identifying encrypted data and decryption routines informs us what to expect in the course of our analysis, especially when debugging. To start off, we'll look into a few code snippets. |
| 4 | An attacker can simply re-encrypt the same malware using a different key, which would result in another signature. But still, the malware runs with the same behavior. |
What are some useful types of computer architure?
| 1 | Von-Neumann Architecture |
| 2 | Harvard Architeture |
| 3 | System Design |
| 4 | All the above |
Which of the following statements is not TRUE regarding Garbage code insertion?
| 1- A lot of malware employs this technique to quickly generate variants of its own code. |
| 2- It may decrease the size of code, but as a result, it makes it undetectable by signature-based anti-malware software. |
| 3- Garbage code insertion is a cheap way of making code look complicated. |
| 4- A code is simply injected with a code or a sequence of code that actually does nothing.
|
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
