Detection of Malicious Code Assets

Detection of Malicious Code (DMC) is a tool for detecting potentially malicious behavior in C/C++ codebases using static information-flow analysis.

The DMC tool detects two types of malicious code: (1) exfiltration of sensitive data and (2) timebombs, logic bombs, remote-access Trojans (RATs), and similar malicious code.

The goal for the DMC tool is to produce output that concisely and precisely characterizes the potentially malicious behaviors of the codebase, so that a human analyst can quickly and accurately determine whether the behavior is benign or malicious.