Uninformed: Informative Information for the Uninformed

Vol 6» 2007.Jan

Notable Protection Mechanisms

PatchGuard version 2 implements a variety of anti-debug, anti-analysis, and obfuscation mechanisms that are worth covering. Not all of PatchGuard's defenses are covered in detail in this paper, and those mechanisms (such as the obfuscation of PatchGuard's internal data structures) that are at least the same in principle as the previous PatchGuard release (and were already disclosed by Uninformed's previous article [2] on PatchGuard) are additionally not covered by this paper.