Which term is used to avoid dynamic analysis by protecting itself from programmer and debugger intervention?

Which term is used to avoid dynamic analysis by protecting itself from programmer and debugger intervention?

• A. Anti-emulation
• B. Anti-heuristics
• C. Anti-goat
• D. E-mail virus

Answer: (B)

Dynamic analysis looks at how a program behaves when it runs, often inside a debugger or sandbox. The idea is to make that analysis harder by using anti-analysis techniques. Anti-heuristics refers to methods that try to defeat heuristic-based detection and analysis, so the program can hide its true behavior from investigators and from tools that rely on generic patterns rather than exact signatures. By manipulating how it behaves in a monitored environment, delaying actions, or presenting non-deterministic behavior, it protects itself from programmer and debugger intervention during runtime analysis. The other options don’t fit this goal as well: anti-emulation targets emulation-based sandboxes, anti-goat isn’t a real, meaningful term here, and an e-mail virus is not about evading dynamic analysis.

Dynamic analysis looks at how a program behaves when it runs, often inside a debugger or sandbox. The idea is to make that analysis harder by using anti-analysis techniques. Anti-heuristics refers to methods that try to defeat heuristic-based detection and analysis, so the program can hide its true behavior from investigators and from tools that rely on generic patterns rather than exact signatures. By manipulating how it behaves in a monitored environment, delaying actions, or presenting non-deterministic behavior, it protects itself from programmer and debugger intervention during runtime analysis. The other options don’t fit this goal as well: anti-emulation targets emulation-based sandboxes, anti-goat isn’t a real, meaningful term here, and an e-mail virus is not about evading dynamic analysis.