Method of decrypting and analyzing encrypted malicious scripts
    27.
    发明授权
    Method of decrypting and analyzing encrypted malicious scripts 有权
    解密和分析加密恶意脚本的方法

    公开(公告)号:US07409718B1

    公开(公告)日:2008-08-05

    申请号:US10685153

    申请日:2003-10-14

    CPC classification number: G06F21/566 G06F21/563

    Abstract: Disclosed herein is a method of analyzing and decrypting encrypted malicious scripts. The method of the present invention comprises the steps of classifying a malicious script encryption method into a case where a decryption function exists in malicious scripts and is an independent function that is not dependent on external codes such as run time library, a case where a decryption function exists and is a dependent function that is dependent on external codes, and a case where a decryption function does not exist; and if the decryption function exists in malicious scripts and is the independent function that is not dependent on the external codes, extracting a call expression and a function definition for the independent function, executing or emulating the extracted call expression and function definition for the independent function, and obtaining a decrypted script by putting a result value based on the execution or emulation into an original script at which an original call expression is located. According to the present invention, unknown malicious codes can be promptly and easily decrypted through only a single decryption algorithm without any additional data. In addition to the decryption of encrypted codes, complexity of later code analysis can also be reduced by substituting constants for all values that can be set as constants in a relevant script.

    Abstract translation: 本文公开了一种分析和解密加密的恶意脚本的方法。 本发明的方法包括以下步骤:将恶意脚本加密方法分类为恶意脚本中存在解密功能的情况,并且是不依赖外部代码的独立功能,例如运行时间库,解密 函数存在并且是依赖于外部代码的依赖函数,以及解密函数不存在的情况; 并且如果解密函数存在于恶意脚本中,并且是不依赖于外部代码的独立函数,则提取独立函数的调用表达式和函数定义,执行或模拟提取的调用表达式和独立函数的函数定义 并且通过将基于执行或仿真的结果值放入原始呼叫表达式所在的原始脚本中来获得解密的脚本。 根据本发明,未知的恶意代码可以通过仅一个解密算法被迅速且容易地解密,而没有任何额外的数据。 除了加密代码的解密之外,还可以通过将常量替换为可以设置为相关脚本中的常量的所有值来减少后续代码分析的复杂性。

    HYDROGEN PRODUCTION MODULE BY INTEGRATED REACTION/SEPARATION PROCESS, AND HYDROGEN PRODUCTION REACTOR USING SAME
    29.
    发明申请
    HYDROGEN PRODUCTION MODULE BY INTEGRATED REACTION/SEPARATION PROCESS, AND HYDROGEN PRODUCTION REACTOR USING SAME 有权
    通过集成反应/分离方法生产氢气的模块和使用相同的氢生产反应器

    公开(公告)号:US20150298971A1

    公开(公告)日:2015-10-22

    申请号:US14354854

    申请日:2012-08-08

    Abstract: The present invention relates to a hydrogen production module by an integrated reaction/separation process, and a hydrogen production reactor using the same, and more specifically, provides a hydrogen production apparatus which laminates a plurality of layered unit cells, is mounted in a pressure-resistant chamber, and can be operated at a high pressure, wherein the unit cell comprises a first modified catalyst, and a second modified catalyst opposite to a hydrogen separator. The hydrogen production module can produce hydrogen using a hydrocarbon, carbon monoxide and an alcohol as sources. Particularly, all the modified catalysts are formed into a porous metal plate form, thereby maximizing the heat transfer effect necessary for reaction. While a reaction and separation of hydrogen simultaneously occur, separated reactants permeate the first modified catalyst so as to come in contact with the same, and then pass through the gap between the hydrogen separator and the second modified catalyst opposite to each other. Therefore, it is possible to obtain a high efficiency over the equilibrium conversion rate of reaction temperature, and high purity hydrogen can be obtained.

    Abstract translation: 本发明涉及通过一体化反应/分离方法的氢气生产模块和使用该制氢反应器的氢气生产反应器,更具体地说,提供一种将多个分层单元电池层叠的氢制造装置, 并且可以在高压下操作,其中单元电池包括第一改性催化剂和与氢分离器相对的第二改性催化剂。 氢气生产模块可以使用烃,一氧化碳和酒精作为源产生氢。 特别地,所有的改性催化剂形成多孔金属板形式,从而最大化反应所需的传热效果。 同时发生氢的反应和分离,分离的反应物渗入第一改性催化剂以与其接触,然后通过氢分离器和第二改性催化剂彼此相对的间隙。 因此,可以获得比反应温度的平衡转化率高的效率,并且可以获得高纯度的氢。

Patent Agency Ranking