Code Obfuscation using pseudo-random number generators

We describe a novel method for malicious code obfuscation that uses code already present in systems: a pseudorandom number generator. This can also be seen as an antidisassembly and anti-debugging technique, depending on deployment, because the actual code does not exist until run - it is generated dynamically by the pseudo-random number generator. A year's worth of experiments are used to demonstrate that this technique is a viable code obfuscation option for a malicious adversary with access to large amounts of computing power. © 2009 IEEE.