. [. Bibliographie, M. Abadi, Ú. Budiu, and &. Erlingsson, Ligatti ? « Control-flow integrity, Proceedings of the 12th ACM conference on Computer and communications security, pp.340-353, 2005.

. Adl88, Adleman ? « An abstract theory of computer viruses, Advances in Cryptology ? CRYPTO'88, 1988.

]. D. Bck-+-10, M. Balzarotti, C. Cova, C. Karlberger, E. Kruegel et al., Vigna ? « Efficient detection of split personalities in malware, Network and Distributed System Security (NDSS), 2010.

B. V. Bala, E. Duesterwald, and &. , Banerjia ? « Dynamo: a transparent dynamic optimization system, Proceedings of the ACM SIG- PLAN 2000 conference on Programming language design and implementation, ACM [Bel05] F. Bellard ? « QEMU, a fast and portable dynamic translator, p.41, 2000.

. Bkh-+-06-]-p, M. Baecher, T. Koetter, M. Holz, and &. Dornseif, Freiling ? « The nepenthes platform: An efficient approach to collect malware, Recent Advances in Intrusion Detection, pp.165-184, 2006.

B. G. Bonfante, M. Kaczmarek, and &. , On Abstract Computer Virology from a Recursion Theoretic Perspective, Journal in Computer Virology, vol.23, issue.3, pp.45-54, 2006.
DOI : 10.1515/9781400882007

URL : https://hal.archives-ouvertes.fr/inria-00115199

D. Bruschi, L. Martignoni, and &. , Monga ? « Detecting selfmutating malware using control-flow graph matching », Detection of Intrusions and Malware & Vulnerability Assessment, pp.129-143, 2006.

B. G. Bonfante, J. Marion, and &. , Reynaud ? « A computability perspective on self-modifying programs », Software Engineering and Formal Methods, p.23, 2009.

P. [. Brumley, D. Poosankam, and &. Song, Zheng ? « Automatic patch-based exploit generation is possible: Techniques and implications, Proceedings of the 2008 IEEE Symposium on Security and Privacy, pp.143-157, 1975.
DOI : 10.1109/sp.2008.17

URL : http://www.cs.cmu.edu/~dbrumley/pubs/apeg.pdf

E. [. Clarke and &. Emerson, Sistla ? « Automatic verification of finite-state concurrent systems using temporal logic specifications, ACM Transactions on Programming Languages and Systems (TOPLAS), vol.8, issue.2, pp.263-299, 1986.

A. Chaudhuri, P. Naldurg, and &. , A type system for data-flow integrity on Windows Vista, ACM SIGPLAN Notices, vol.43, issue.12, pp.9-20, 1968.
DOI : 10.1145/1513443.1513447

]. C. Cpm-+-98, C. Cowan, D. Pu, H. Maier, J. Hintony et al., Automatic adaptive detection and prevention of bufferoverflow attacks, Proceedings of the 7th conference on USENIX Security Symposium The evolution of viruses and worms Statistical Methods in Computer Security, p.76, 1998.

H. Cai, Z. Shao, and &. , Vaynberg ? « Certified self-modifying code, 25 [Dmi01] M. Dmitriev ? « Safe class and data evolution in large and long-lived Java [tm] applications Thèse, pp.77-86, 2001.

]. R. Dmr-+-09, A. Deibert, R. Manchanda, N. Rohozinski, &. G. Villeneuve et al., Investigating a Cyber Espionage Network, 2009.

A. Dinaburg, P. Royal, M. Sharif, &. W. Lee, and ?. Ether, Malware analysis via hardware virtualization extensions, Proceedings of the 15th ACM conference on Computer and communications security, pp.51-62, 2008.

&. [. Ford, ?. Cox, and . Vx32, Lightweight user-level sandboxing on the x86, 2008 USENIX Annual Technical ConferenceFer08] P. Ferrie ? « Anti-unpacker tricks Proc. of the 2nd International CARO Workshop [Fil05] E. Filiol ? Computer viruses: from theory to applications, pp.39-72, 2005.

J. Giffin, M. Christodorescu, and &. , Kruger ? « Strengthening software self-checksumming via self-modifying code, 21st Annual Computer Security Applications Conference, pp.10-25, 2005.
DOI : 10.1109/csac.2005.53

URL : http://www.cs.wisc.edu/%7Emihai/publications/Strengthening%20Software%20Self-Checksumming%20via%20Self-Modifying%20Code/Strengthening%20Software%20Self-Checksumming%20via%20Self-Modifying%20Code.pdf

F. Guo, P. Ferrie, and &. , Chiueh ? « A study of the packer problem and its solutions, Recent Advances in Intrusion Detection, pp.98-115, 2008.

P. [. Goldberg, C. Goldberg, and &. Phillips, Sorkin ? « Constructing computer virus phylogenies, Combinatorial Pattern Matching, pp.253-270, 1996.
DOI : 10.1007/3-540-61258-0_19

URL : https://digital.library.unt.edu/ark:/67531/metadc672831/m2/1/high_res_d/236226.pdf

W. Guizani, J. Marion, and &. , Reynaud ? « Server-Side Dynamic Code Analysis, 4th International Conference on Malicious and Unwanted Software, p.87, 2009.

T. Garfinkel, B. Pfaff, &. M. Rosenblum, and ?. Ostia, A delegating architecture for secure system call interposition, Proceedings of the Network and Distributed Systems Security Symposium, pp.187-201, 2004.

. Hee09, Heelan ? « Automatic generation of control flow hijacking exploits, 2009.

T. Holz, M. Steiner, F. Dahl, E. Biersack, and &. , Freiling ? « Measurements and mitigation of peer-to-peer-based botnets: a case study on storm worm, Proceedings of the 1st Usenix Workshop on Large-Scale Exploits and Emergent Threats, USENIX Association, pp.1-9, 2008.

V. Kiriansky, D. Bruening, and &. S. , Amarasinghe ? « Secure execution via program shepherding, Proceedings of the 11th USENIX Security Symposium USENIX Association, pp.191-206, 2002.

J. Kinder, S. Katzenbeisser, C. Schallhart, and &. , Veith ? « Detecting malicious code by model checking », Detection of Intrusions and Malware and Vulnerability Assessment, pp.174-187, 1952.

M. Kang, P. Poosankam, &. H. Yin, and ?. Renovo, A hidden code extractor for packed executables, Proceedings of the 2007 ACM workshop on Recurring malcode, pp.53-72, 2007.

M. Kang, H. Yin, S. Hanna, S. Mccamant, and &. , Song ? « Emulating emulation-resistant malware, Proceedings of the 1st ACM workshop on Virtual machine securityLan84] C. Langton ? « Self-reproduction in cellular automata, pp.11-22, 1984.

]. K. Law96, ?. Lawton, and . Bochs, A portable pc emulator for unix, Linux Journal, issue.29es, pp.7-41, 1996.

C. Luk, R. Cohn, R. Muth, H. Patil, A. Klauser et al., Hazelwood ? « Pin: building customized program analysis tools with dynamic instrumentation, Proceedings of the 2005 ACM SIGPLAN conference on Programming language design and implementation The new front line: Estonia under cyberassault, pp.190-200, 2005.

]. J. Lew10, Lewis ? « The cyber war has not begun, Center for Strategies and International Studies, 2006.

]. M. Lop08, ?. Lopez, and . Unpacking, Yellin ? Java virtual machine specification, 2nd International Computer Antivirus Researchers Organization, pp.72-86, 1999.

L. Martignoni, M. Christodorescu, &. S. Jha, and ?. Omniunpack, Fast, generic, and safe unpacking of malware, Proceedings of the Annual Computer Security Applications Conference (ACSAC), pp.72-66, 2007.

C. [. Moser and &. Kruegel, Kirda ? « Exploring multiple execution paths for malware analysis, IEEE Symposium on Security and Privacy, pp.231-245, 2007.

&. [. Moore, ?. Shannon, and . The, The Cooperative Association for Internet Data Analysis, 2001.

]. J. Neu66, Neumann ? Theory of self-reproducing automata, 1966.

&. [. Nethercote, ?. Seward, and . Valgrind, Valgrind, Electronic Notes in Theoretical Computer Science, vol.89, issue.2, pp.44-66, 2003.
DOI : 10.1016/S1571-0661(04)81042-9

M. Oberhumer, L. Molnár, &. J. Reiser, and ?. Upx, Ultimate Packer for eXecutables http://upx.sourceforge.net. 25 [One96] A. One ? « Smashing the stack for fun and profit, pp.1996-2007, 1981.

. Pmr-+-09-]-r, L. Paleari, G. Martignoni, D. Roglia, U. Bruschi et al., di Udine ? « A fistful of red-pills: How to automatically generate procedures to detect CPU emulators, Proceedings of the USENIX Workshop on Offensive Technologies (WOOT)PSY09] P. Porras, H. Saidi & V. Yegneswaran ? « Conficker C Analysis, p.86, 2009.

D. Halpin, R. Dagon, &. W. Edmonds, ?. Lee, and . Polyunpack, Automating the hidden-code extraction of unpack-executing malware « Analysis of the Intel Pentium's ability to support a secure virtual machine monitor, 22nd Annual Computer Security Applications Conference Proceedings of the 9th conference on USENIX Security Symposium, pp.289-300, 2000.

T. Raffetseder, C. Kruegel, &. E. Kirda, ?. Detecting-system-emulators, ». et al., Rogers ? Theory of recursive functions and effective computability, McGraw-Hill New York, A new approach to computer security via binary analysis », Information Systems Security, pp.1-18, 1967.

&. [. Shoch, The ???worm??? programs---early experience with a distributed computation, Communications of the ACM, vol.25, issue.3, pp.172-180, 1982.
DOI : 10.1145/358453.358455

M. Sharif, A. Lanzi, J. Giffin, and &. , Lee ? « Automatic reverse engineering of malware emulators, 30th IEEE Symposium on Security and Privacy, pp.94-109, 1994.

]. Spa89 and . Comput, Spafford ? « The Internet worm program: an analysis, Commun. Rev, vol.19, issue.1, pp.17-57, 1989.

]. D. Volpano, C. Irvine, and &. , Smith ? « A sound type system for secure flow analysis, Yin & D. Song ? « TEMU: Binary Code Analysis via Whole- System Layered Annotative Execution, pp.25-167, 1996.

]. B. Yee, D. Sehr, G. Dardyk, J. Chen, R. Muth et al., Fullagar ? « Native client: A sandbox for portable, 30th IEEE Symposium on Security and Privacy, p.40, 2009.
DOI : 10.1109/sp.2009.25

URL : http://www.muth.org/Robert/Papers/sosp_2009.pdf

H. Yin, D. Song, M. Egele, C. Kruegel, &. E. Kirda et al., Capturing system-wide information flow for malware detection and analysis, Proceedings of the 14th ACM conference on Computer and communications security, pp.127-68, 2007.