返回
Invalidating Analysis Knowledge for Code Virtualization Protection Through Partition Diversity
DOI:10.1109/ACCESS.2019.2954165.png)
摘要
En 中文
To protect programs from unauthorized analysis, virtualize the code based on Virtual Machine (VM) technologies is emerging as a feasible method for accomplishing code obfuscation. However, in some State-of-the-art VM-based protection approaches, the set of virtual instructions and bytecode interpreters are fixed across the whole programs. This means an experienced attacker could extract the mapping information between virtual instructions and native code from programs, and use this knowledge to uncover the mapping relationships in similar protecting applications. To address this problem, we present CoDiver (Code Virtualization Protection with Diversity), a novel VM-based code obfuscation system in this paper. The main idea of our approach is to obfuscate the mapping between the opcodes of bytecode instructions and their semantics. To achieve this goal, we first turn every protected code region into multiple parts by partition proceeding, randomize the mapping of opcodes and their semantics of each part. By this way, we could translate the bytecode instruction into different native code in different sections of the obfuscated code. This method could increase the diversity of program behavior significantly. As a result, it will be useless to learn the mapping relationship between bytecode and native code of some other programs, then migrate it into a new program. We build a prototype of CoDiver and tested it on a set of real-world applications. Experimental results show that as compared with two state-of-the-art VM-based code obfuscation approaches, our approach is more effective and could provide stronger protection with comparable runtime overhead and code size.
Keyword:
Instruction set randomization
reverse engineering
virtualized obfuscation
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
Oxygen Reduction Kinetics Enhancement on a Heterostructured Oxide Surface for Solid Oxide Fuel Cells
Enhance virtual-machine-based code obfuscation security through dynamic bytecode scheduling通过动态字节码调度增强基于虚拟机的代码混淆安全性
COMPUTERS & SECURITY
IF5.4
Protecting Software through Obfuscation: Can It Keep Pace with Progress in Code Analysis?通过混淆保护软件: 它能否跟上代码分析的进度?

