![]() ![]() A framework for measuring software obfuscation resilience against automated attacks. Tamper resistant software: An implementation. In Proceedings of the 2007 ACM workshop on Quality of protection, pages 15-20. Program obfuscation: a quantitative approach. ![]() ![]() In Tools and Algorithms for the Construction and Analysis of Systems, pages 367-381. Demand-driven compositional symbolic execution. An orchestrated survey of methodologies for automated software test case generation. On the other hand, we present new obfuscation transformations that change program behavior in subtle yet acceptable ways, and show that they can render symbolic-execution based deobfuscation analysis ineffective in practice. A crucial and perhaps surprising observation we make is that symbolic-execution based deobfuscators can easily deobfuscate transformations that preserve program semantics. The results show that many existing obfuscation transformations, such as virtualization, stand little chance of withstanding symbolic-execution based deobfuscation. We evaluated our approach over 5000 different C programs, which have each been obfuscated using existing implementations of obfuscation transformations. ![]() This paper addresses the problem of characterizing the resilience of code obfuscation transformations against automated symbolic execution attacks, complementing existing works that measure the potency of obfuscation transformations against human-assisted attacks through user studies. The result is that we have no methodical way of knowing what kinds of automated analyses an obfuscation method can withstand. However, there seems to be little work on systematic evaluations of effectiveness of obfuscation techniques against automated program analysis. Code obfuscation is widely used by software developers to protect intellectual property, and malware writers to hamper program analysis. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
December 2022
Categories |