| Version: | 6.3.120822 | | Category: | Programming|Debuggers/Decompilers/Disassemblers | | Developer: | Datarescue | | Size: | 54 mb |
|  IDA (formerly IDA PRO) |
 14 |  1 | |
| |
IDA is a programmable, interactive disassembler coupled multi-processor with a local and remote debugger and supplemented by a complete plugin programming environment. The IDA is special in many ways. The interactivity allows you to improve disassembly in real time. Its multi-processor support is unmatched. But two of our technologies are truly unique, have never been? Under whatever form the real life disassembler and, more importantly, are incredible time savers. IDA is a disassembler. As a disassembler, IDA analyzed binary programs, for which the source code ISN always available, to create maps of their execution. Is the real interest of a disassembler to the instructions that shows actually executed by the processor in a symbolic representation than Assembler. If the friendly screen saver you have just installed spy your e-banking session or logging your e-mails, a disassembler can reveal. However, assembly language is difficult to make sense. Therefore, advanced techniques? Implemented in IDA to the code more readable, in some cases very close to the original source code that produced the binary program. Card program code are then reworked for further investigation. Some people have used as the basis of a genomic classification of viruses. (Mapping analysis of malware Advanced digital genome) IDA is a debugger. But in real life, things are always simple. Malicious code usually does not cooperate with the analyst. Viruses, worms, and Trojan horses are often shielded and hidden. Other powerful tools are needed. The debugger in IDA complements the capabilities of static analysis of the disassembler: by a single step in the object code of an investigation, which often ignored the debugger obfuscation and helps obtain data that the more powerful static disassembler be able will deal in depth. IDA can be used as a local and a remote debugger on the 80x86 (typically Windows / Linux) and the ARM (typically Windows CE PDAs) are used plaform. Remote debuggers are very useful if one wants to safely dissect potentially harmful programs. IDA is interactive. Because no computer can currently beat the human brain when it comes to exploring the unknown, IDA is fully interactive. Unlike its predecessors, IDA always allows the human analyst to override its decisions or advice. Interactivity ends with integrated programming language and open plug-in architecture. IDA is programmable IDA contains a complete development environment that consists of a very powerful macro-like language that is used to automate simple tasks of moderate complexity. For more complex tasks, our open plugin architecture is no limit to what external developers can do to improve the CID function. One could, for example, extend IDA with an MP3 player and make malware sing. However, we suspect our governmental customers are involved in more serious projects.
No comments:
Post a Comment