Repsych: Psychological Warfare in Reverse Engineering
Chris Domas reveals Repsych, abusing IDA Pro graph rendering algorithms to transform binary control flow graphs into visual images and psychological deterrents for analysts.
Summary
Architecture and Background
Your precious 0-day? That meticulously crafted exploit?
Vulnerability Analysis
The perfect foothold? At some point, they'll be captured, dissected, and put on display.
Exploitation and Demonstrations
Reverse engineers. When they begin snooping through your hard work, it pays to have planned out your defense ahead of time.
Remediation and Defensive Strategies
You can take the traditional defensive route - encryption, obfuscation, anti-debugging - or you can go on the offense, and attack the heart and soul of anyone who dare look at your perfect code. With some carefully crafted assembly, we'll show how to break down a reverse engineer by sending them misleading, intimidating, and demoralizing messages through the control flow graphs of their favorite RE tools - turning their beloved IDA (Hopper, BinNavi, Radare, etc) into unwitting weapons for devastating psychological warfare in reverse engineering. Chris is an embedded systems engineer and cyber security researcher, focused on innovative approaches to low level hardware and software RE and exploitation.
Related talks
Main Stage·52 min
Chris Eagle · Sk3wlDbg
Chris Eagle and Sk3wlDbg demonstrate integrating architecture-independent CPU emulation into IDA Pro to unpack obfuscated malware and trace execution.
Main Stage·1 hr 16 min
Chris Eagle
Chris Eagle explores attacking obfuscated code: automated deobfuscation techniques at DEF CON 12, examining reverse-engineering and practical defenses.
Blue Team Village·1 hr
Holger Unterbrink
Demonstrates Dynamic Data Resolver, an IDA Pro plugin leveraging DynamoRIO to unpack and analyze obfuscated malware.