icon-carat-right menu search cmu-wordmark

Detection of Malicious Code (DMC) Tool

Software
By
DMC is a tool for detecting potentially malicious behavior in C/C++ codebases using static information-flow analysis.
Publisher

Software Engineering Institute

Abstract

The DMC tool detects two types of malicious code: (1) exfiltration of sensitive data and (2) timebombs, logic bombs, remote-access Trojans (RATs), and similar malicious code.

The goal for the DMC tool is to produce output that concisely and precisely characterizes the potentially malicious behaviors of the codebase, so that a human analyst can quickly and accurately determine whether the behavior is benign or malicious.