Antivirus bypass using obfuscation
Obfuscation is a simple technique of changing a form of code—such as source code and byte code—to make it less readable. For example, an Android Package Kit (APK) file can easily be decompiled to make it readable to Java code.
Here is an example of a decompilation process:
An app developer does not want unauthorized individuals to see their code, so the developer will use an obfuscation technique to protect the code and make it unreadable.
There are several obfuscation techniques. These are the two main techniques we have used in our research:
- Rename obfuscation
- Control-flow obfuscation
Let's look at both of these techniques in detail.
Rename obfuscation
With this technique, obfuscation is mainly performed on the variable names within the code. This technique makes it difficult to read and understand the code, as well as to understand...