IDA is programmable, interactive, multi-processor disassembler coupled to a local and remote debugger and augmented by a complete plugin programming environment. IDA is in many ways unique. Its interactivity allows the improvement disassemblies in real time. Its multi-processor support is unmatched. Even two of our technologies are truly unique, never implemented under any form, any real disassemblers and, more importantly, are incredible time savers. IDA disassembler. As a disassembler, IDA explores binary programs, for which source code is always available in March to create maps of their execution. Genuine interest in disassembler is that it shows instructions by the processor in a symbolic representation called assembly language actually implemented. If friendly screen saver you have just installed is spying on e-banking session or to register your e-mail can be retrieved by the disassembler. However, assembly language, it is difficult to make sense. That is why they have implemented advanced techniques in IDA that the code is read, in some cases, very close to the original source code that produced the binary program. Site program code is then postprocessed for further investigations. Some people use it as a root of genomic classification of viruses. (Digital genome mapping advanced malware analysis) IDA's debugger. But in real life, things aren always easy. Hostile code usually does not cooperate with the analyst. Viruses, worms, and Trojan horses are often armored and obfuscated. More powerful tools are required. Debugger in IDA complements the static analysis capabilities disassembler: by allowing to single step code being investigated, the debugger often bypasses the obfuscation and helps obtain data that the more powerful static disassembler can process in depth. IDA can be used as a local and as a remote debugger on the 80x86 (typically a Windows / Linux) and ARM platforms (typically Windows CE PDA devices). Remote debuggers are very useful when you want to safely dissect potentially harmful programs. IDA is interactive. You can not beat the computer is currently the human brain when it comes to exploring the unknown, IDA is fully interactive. In sharp contrast with its predecessors, IDA always allows the human analyst to override its decisions or to provide advice. Interactivity culminates in a built-in programming language and an open plugin architecture. IDA also can be programmed IDA contains a complete development environment that consists of a very powerful macro-like language that can be used to automate mild to moderate complexity of the task. For more advanced tasks, our open plugin architecture puts no limits on what external developers can do to improve IDAS functionality. You could, for example, extend IDA with MP3 player and malware-and sing. However, we suspect our governmental customers are involved in more serious projects. |
137 Seeds
80 Leechers
Share ratio
No comments:
Post a Comment