Which term is used for viruses that can secure intellectual property against emulation-assisted reverse engineering?

Which term is used for viruses that can secure intellectual property against emulation-assisted reverse engineering?

• A. Anti-heuristics
• B. Anti-emulation
• C. Armored viruses
• D. E-mail virus

Answer: (B)

Anti-emulation describes malware that detects it is running in an emulator or sandbox and changes its behavior to evade analysis. By checking for virtualization artifacts, timing differences, or other emulator clues, the code can withhold its real payload or behave differently, making emulation-assisted reverse engineering difficult and protecting intellectual property. Other terms like anti-heuristics, armored viruses, or an e-mail virus don’t specifically target evading emulation-based analysis, which is why anti-emulation is the best fit.

Anti-emulation describes malware that detects it is running in an emulator or sandbox and changes its behavior to evade analysis. By checking for virtualization artifacts, timing differences, or other emulator clues, the code can withhold its real payload or behave differently, making emulation-assisted reverse engineering difficult and protecting intellectual property. Other terms like anti-heuristics, armored viruses, or an e-mail virus don’t specifically target evading emulation-based analysis, which is why anti-emulation is the best fit.