.png){kind=icon}
返回
Flexible software protection
.png){kind=icon}
OA
AI
DOI：10.1016/j.cose.2022.102636.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
To counter software reverse engineering or tampering, software obfuscation tools can be used. However, such tools to a large degree hard-code how the obfuscations are deployed. They hence lack resilience and stealth in the face of many attacks. To counter this problem, we propose the novel concept of flexible obfuscators, which implement protections in terms of data structures and APIs already present in the application to be protected. The protections are hence tailored to the application in which they are deployed, making them less learnable and less distinguishable. In our research, we concretized the flexible protection concept for opaque predicates. We designed an interface to enable the reuse of existing data structures and APIs in injected opaque predicates, we analyzed their resilience and stealth, we implemented a proof-of-concept flexible obfuscator, and we evaluated it on a number of real-world use cases. This paper presents an in-depth motivation for our work, the design of the interface, an in-depth security analysis, and a feasibility report based on our experimental evaluation. The findings are that flexible opaque predicates indeed provide strong resilience and improved stealth, but also that their deployment is costly, and that they should hence be used sparsely to protect only the most security-sensitive code fragments that do not dominate performance. Flexible obfuscation therefor delivers an expensive but also more durable new weapon in the ever ongoing software protection arms race.(c) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Man-at-the-end attacks
Obfuscation
Code reuse
Software protection
Flexibility
Stealth
Resilience
Opaque predicates
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Diversification and obfuscation techniques for software security: A systematic literature review软件安全的多样化和混淆技术: 系统的文献综述OAAI
OAAI分享收藏The Clinicopathological Characteristics And Genetic Alterations of Signet-ring Cell Carcinoma in Gastric Cancer.png)
CancersOAAI
CancersIF0
OAAI分享收藏
Understanding the behaviour of hackers while performing attack tasks in a professional setting and in a public challenge了解黑客在专业环境和公共挑战中执行攻击任务时的行为
PREAI
分享收藏
查看更多内容