0

I need a database of malicious code for MIPS processor Assembly or C to inject in Mibench and evaluate my detection mechanism at run time. Is there anything like this for MIPS? what about for other processors? I have shellcodes for MIPS and I want virus like codes for MIPS. Don't we have any attack benchmark for this purpose?

5
  • a database of code? detection of what? – Ange Dec 19 '13 at 16:36
  • I compile my C code to assembly and inject malicious code in it and the assemble it and test detection mechanism. I need malicious assembly code for this – Kaykha Dec 19 '13 at 19:51
  • Typically, assembly code in itself is not inherently malicious. It's how it interacts with the system resources and the user that makes it malicious, and for that you would need to know the operating system on which the code was running. – Jason Geffner Dec 19 '13 at 19:54
  • 1
    I don't think this is a dumb question, despite the fact that it has been voted down. Kaykha, you are trying to develop a detection mechanism for malicious embedded code? You are asking "Is there any resource containing known MIPS malware samples and documented infection techniques that work on embedded MIPS targets, specifically MiBench?" – dingo_kinznerhook Dec 19 '13 at 20:31
  • It's a research project. I want to show proposed method's results for real changes in the executing program. I need assembly code to add it to the healthy program and observe effects of this modifications on the observed parameters. thanks. – Kaykha Dec 20 '13 at 11:42
1

You are asking for a database of MIPS code for evaluating a detection technique, but I'm not sure that there are databases of embedded malware for public evaluation the same way that there are databases of desktop malware. If there are, I would love to know about them.

As an alternative (and I am sure you have done this), try searching for examples of MIPS shellcode and crafting exploits that work on your own framework. This is a lot of work, but there are definitely examples of MIPS shellcode and malicious embedded logic described in articles (like www.shell-storm.org/shellcode, metasploit, etc.) that you could use. They are just not in a unified database. Also, you may need to do some work to craft things that will exploit things in MiBench.

1
  • Thanks for link. I saw it and now my work is only on shellcode. but I want to extend to Virus like codes for MIPS. because shellcodes dont return to main program but viruses return to program and progrom finishes its work although malicious task done. – Kaykha Dec 21 '13 at 7:37
0

If you want a database about malicious code, you may want to take a look at IDS and antivirus, like ClamAV or Snort.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.