I need a database of malicious code for MIPS processor Assembly or C to inject in Mibench and evaluate my detection mechanism at run time. Is there anything like this for MIPS? what about for other processors? I have shellcodes for MIPS and I want virus like codes for MIPS. Don't we have any attack benchmark for this purpose?
-
a database of code? detection of what?– AngeDec 19, 2013 at 16:36
-
I compile my C code to assembly and inject malicious code in it and the assemble it and test detection mechanism. I need malicious assembly code for this– KaykhaDec 19, 2013 at 19:51
-
Typically, assembly code in itself is not inherently malicious. It's how it interacts with the system resources and the user that makes it malicious, and for that you would need to know the operating system on which the code was running.– Jason GeffnerDec 19, 2013 at 19:54
-
1I don't think this is a dumb question, despite the fact that it has been voted down. Kaykha, you are trying to develop a detection mechanism for malicious embedded code? You are asking "Is there any resource containing known MIPS malware samples and documented infection techniques that work on embedded MIPS targets, specifically MiBench?"– dingo_kinznerhookDec 19, 2013 at 20:31
-
It's a research project. I want to show proposed method's results for real changes in the executing program. I need assembly code to add it to the healthy program and observe effects of this modifications on the observed parameters. thanks.– KaykhaDec 20, 2013 at 11:42
Add a comment
|
2 Answers
You are asking for a database of MIPS code for evaluating a detection technique, but I'm not sure that there are databases of embedded malware for public evaluation the same way that there are databases of desktop malware. If there are, I would love to know about them.
As an alternative (and I am sure you have done this), try searching for examples of MIPS shellcode and crafting exploits that work on your own framework. This is a lot of work, but there are definitely examples of MIPS shellcode and malicious embedded logic described in articles (like www.shell-storm.org/shellcode, metasploit, etc.) that you could use. They are just not in a unified database. Also, you may need to do some work to craft things that will exploit things in MiBench.
answered Dec 20, 2013 at 21:55
-
Thanks for link. I saw it and now my work is only on shellcode. but I want to extend to Virus like codes for MIPS. because shellcodes dont return to main program but viruses return to program and progrom finishes its work although malicious task done.– KaykhaDec 21, 2013 at 7:37
