Vasily N. Astratov

21 papers Journal 5Unranked 16
YearRankTypeTitle / Venue / Authors
2023 J jnl
CoRR
Thuy T. Le, Vo Anh Khoa, Michael Victor Klibanov, Loc Hoang Nguyen, Grant W. Bidney, Vasily N. Astratov
2021 J jnl
CoRR
Michael V. Klibanov, Vo Anh Khoa, Alexey V. Smirnov, Loc H. Nguyen, Grant W. Bidney, Lam H. Nguyen, Anders J. Sullivan, Vasily N. Astratov
2020 J jnl
CoRR
Vo Anh Khoa, Grant W. Bidney, Michael V. Klibanov, Loc H. Nguyen, Lam H. Nguyen, Anders J. Sullivan, Vasily N. Astratov
2020 J jnl
CoRR
Vo Anh Khoa, Grant W. Bidney, Michael V. Klibanov, Loc H. Nguyen, Lam H. Nguyen, Anders J. Sullivan, Vasily N. Astratov
2020 conf
ICTON
Boya Jin, Grant W. Bidney, Nicholaos I. Limberopoulos, Joshua M. Duran, Gamini Ariyawansa, Igor Anisimov, Augustine M. Urbas, Sarath D. Gunapala, Vasily N. Astratov
2020 conf
ICTON
Hanyang Li, Bojian Shi, Boya Jin, Nicholaos I. Limberopoulos, Vasily N. Astratov
2020 conf
ICTON
Boya Jin, Alexey M. Korolev, Alexey V. Maslov, Vasily N. Astratov
2019 conf
ICTON
Hanyang Li, Bojian Shi, Boya Jin, Nicholaos I. Limberopoulos, Vasily N. Astratov
2019 conf
ICTON
Vasily N. Astratov, Farzaneh Abolmaali, Aaron Brettin, Grant W. Bidney, Boya Jin, Nicholaos I. Limberopoulos, Dennis E. Walker, Hanyang Li, Alexey V. Maslov
2018 J jnl
SIAM J. Imaging Sci.
Michael V. Klibanov, Nikolay A. Koshev, Dinh-Liem Nguyen, Loc H. Nguyen, Aaron Brettin, Vasily N. Astratov
2018 conf
ICTON
Vasily N. Astratov, Aaron Brettin, Farzaneh Abolmaali, Luiz Poffo, Alexey V. Maslov
2017 conf
ICTON
Farzaneh Abolmaali, Yangcheng Li, Kenneth W. Allen, Nicholaos I. Limberopoulos, Augustine M. Urbas, Yury P. Rakovich, Alexey V. Maslov, Vasily N. Astratov
2017 conf
ICTON
Vasily N. Astratov, Aaron Brettin, Farzaneh Abolmaali, Cobey L. McGinnis, Kylen F. Blanchette, Yuri E. Nesmelov, Alexey V. Maslov, Nicholaos I. Limberopoulos, Dennis E. Walker, Augustine M. Urbas
2017 conf
ICTON
Alexey V. Maslov, Vasily N. Astratov
2016 conf
ICTON
Vasily N. Astratov, Farzaneh Abolmaali, Aaron Brettin, Kenneth W. Allen, Alexey V. Maslov, Nicholaos I. Limberopoulos, Dennis E. Walker, Augustine M. Urbas
2016 conf
ICTON
Aaron Brettin, Farzaneh Abolmaali, Nicholaos I. Limberopoulos, Dennis E. Walker, Augustine M. Urbas, Vasily N. Astratov
2015 conf
ICTON
Kenneth W. Allen, Vladimir Liberman, Mordechai Rothschild, Nicholaos I. Limberopoulos, Dennis E. Walker, Augustine M. Urbas, Vasily N. Astratov
2015 conf
ICTON
Alexey V. Maslov, Michael I. Bakunov, Vasily N. Astratov
2015 conf
ICTON
Kenneth W. Allen, Navid Farahi, Yangcheng Li, Nicholaos I. Limberopoulos, Dennis E. Walker, Augustine M. Urbas, Vladimir Liberman, Vasily N. Astratov
2014 conf
ICTON
Alexey V. Maslov, Michael I. Bakunov, Yangcheng Li, Vasily N. Astratov
2014 conf
ICTON
Yangcheng Li, Kenneth W. Allen, Farzaneh Abolmaali, Alexey V. Maslov, Vasily N. Astratov
redb/extractors/decompiler/bninja/analysis/api.py
← Index redb/extractors/decompiler/bninja/analysis/api.py python
from enum import Enum


class ApiCategory(Enum):
    FILE_OP = [
        "CreateFile",
        "ReadFile",
        "WriteFile",
        "DeleteFile",
        "SetFilePointer",
        "CopyFile",
        "MoveFile",
        "FindFirstFile",
        "FindNextFile",
    ]
    MEMORY_OP = [
        "VirtualAlloc",
        "VirtualFree",
        "HeapAlloc",
        "HeapFree",
        "LocalAlloc",
        "GlobalAlloc",
        "MapViewOfFile",
        "VirtualProtect",
    ]
    NETWORK_OP = [
        "socket",
        "connect",
        "bind",
        "send",
        "recv",
        "WSAStartup",
        "InternetOpen",
        "InternetConnect",
        "HttpOpenRequest",
        "HttpSendRequest",
        "InternetReadFile",
        "URLDownloadToFile",
    ]
    REGISTRY_OP = [
        "RegOpenKey",
        "RegCreateKey",
        "RegSetValue",
        "RegQueryValue",
        "RegDeleteKey",
        "RegEnumKey",
        "RegFlushKey",
    ]
    PROCESS_OP = [
        "CreateProcess",
        "OpenProcess",
        "TerminateProcess",
        "GetProcessId",
        "CreateProcessAsUser",
        "NtCreateProcess",
    ]
    THREAD_OP = [
        "CreateThread",
        "SuspendThread",
        "ResumeThread",
        "CreateRemoteThread",
        "SetThreadContext",
        "GetThreadContext",
    ]
    INJECTION_OP = [
        "WriteProcessMemory",
        "VirtualAllocEx",
        "NtWriteVirtualMemory",
        "SetWindowsHookEx",
        "QueueUserAPC",
        "NtMapViewOfSection",
    ]
    EVASION_OP = [
        "IsDebuggerPresent",
        "CheckRemoteDebuggerPresent",
        "NtQueryInformationProcess",
        "GetTickCount",
        "OutputDebugString",
        "Sleep",
        "QueryPerformanceCounter",
    ]
    SPYING_OP = [
        "GetAsyncKeyState",
        "GetKeyboardState",
        "GetKeyState",
        "GetForegroundWindow",
        "SetWindowsHookEx",
        "BitBlt",
        "GetClipboardData",
    ]
    SYSTEM_OP = [
        "CreateToolhelp32Snapshot",
        "EnumDeviceDrivers",
        "EnumProcesses",
        "GetSystemDirectoryA",
        "GetLogicalDrives",
    ]
    SERVICE_OP = [
        "CreateServiceA",
        "OpenServiceA",
        "StartServiceA",
        "DeleteService",
        "OpenSCManagerA",
        "ControlService",
    ]
    CRYPTO_OP = [
        "CryptAcquireContext",
        "CryptGenKey",
        "CryptEncrypt",
        "CryptDecrypt",
        "CryptCreateHash",
        "CryptHashData",
        "CryptGenRandom",
    ]
    DLL_OP = ["LoadLibrary", "GetProcAddress", "FreeLibrary", "LdrLoadDll"]
    UNKNOWN_OP = []

    @classmethod
    def from_api(cls, api_name):
        for category in cls:
            if any(api_name.startswith(api) for api in category.value):
                return category
        return cls.UNKNOWN_OP