Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Is compiled code more of a security risk than interpreted code? I'm under the impression that it is due to the fact that compiled code can hide malicious code from malware scans.

share|improve this question
    
Actually, using power shell to bypass anti-virus software is a pretty common trick these days. They both have advantages and disadvantages. –  gparent Apr 9 '13 at 5:36
add comment

2 Answers

No.

Compiled code is just translated into machine code, an attacker can alter instructions for both, compiled and interpreted. Whatever you could do with one, you can also do with the other.

Your decision for either compiled or interpreted should be dependent on what you actually want to do with your code. Compiled languages usually have a higher performance, while you can easily modify interpreted code. It is easy to implement and you can run/test it on the fly.

There should be no difference between interpreted and compiled code regarding security issues, and languages should not be categorized that way in my opinion.

share|improve this answer
add comment

There is no difference between compiled code and interpreted code as far as the detection goes. The reason most malware authors use compiled code for their malware is due to the fact that native compiled code is not dependent on any external library or interpreted environment. A native exe is going to run on a Windows or Linux machine without requiring any other software on the victim's machine. By contrast, a malware that is written in perl or python needs perl or python interpreter on the target environment for its execution. Therefore, the stacks gets lower if a given malware will run on a machine or not if it is dependent on any special environment or configuration.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.