robot icon indicating copy to clipboard operation
robot copied to clipboard

Dynamically import all system calls

Open dkrutsko opened this issue 7 years ago • 0 comments

For improved security, it might be a good idea to not statically link system calls but instead, dynamically load and resolve said system calls during runtime. As an example, on Windows, the system calls can be retrieved entirely through the PEB.

Another security feature would be to encrypt the system call strings as to not leave any trace of the functions used in the compiled library. Encrypting the strings using a random key everytime the library is compiled might also be a cool idea, if it could be done reliably.

dkrutsko avatar Mar 13 '18 01:03 dkrutsko