3 ms·
> But how many C/C++ engineers would think to design a system that runs a min interpreted code, This is essentially how antivirus software works. Every one of
by staticassertion 7y ago
> But how many C/C++ engineers would think to design a system that runs a min interpreted code,
This is essentially how antivirus software works. Every one of them packages an emulator to execute malicious binaries.
I'd say the number one thing stopping C++ devs from running eval'd C++ code is the lack of a std eval, and that's probably it.
- LeoNatan25 7y agoAntivirus software normally matches code patterns to well-known pattern database. It does not investigate the code on the client machine. AV software houses run their own labs, where emulation is used to inspect suspected malicious code.
- staticassertion 7y agoTo my knowledge every single major AV packages a local emulator. We have long, long moved beyond a world where AV does basic pattern matching. Frankly, I am far less concerned with the js interpreter than I am the rest of the codebase. http://computervirus.uw.hu/ch11lev1sec4.html http://computervirus.uw.hu/ch11lev1sec4.html https://www.blackhat.com/presentations/bh-europe-08/Feng-Xue/Whitepaper/bh-eu-08-xue-WP.pdf https://www.blackhat.com/presentations/bh-europe-08/Feng-Xue... http://joxeankoret.com/download/breaking_av_software_44con.pdf http://joxeankoret.com/download/breaking_av_software_44con.p...