Their technique is pretty interesting (open coding). There is a level in abstraction below (more real) that is greatly helpful in breaking DRM and finding othe

Their technique is pretty interesting (open coding). There is a level in abstraction below (more real) that is greatly helpful in breaking DRM and finding other weird bits of code. Running code in an instrumented qemu for example. It is much more accessible and productive for me over SMT solver tooling. Generally their attack tree is very nice, but they sweep a lot under the rug in their dynamic analysis section. This is a short paper though, so no fault there. Their tree is a concise outline for anyone looking to methodically RE any black box thing, not just DRM and protection schemes.