CipherTrace: automatic detection of ciphers from execution traces by Hassanin, MA

“…This trend is known as cryptovirology, which was first introduced in 1996. The ever-increasing number of malware samples employing cryptography has demanded for more sophisticated analysis techniques to account for the malware and its operation(s), and if applicable, allow for neutralization and/or recovery. …”