检索结果-内蒙古大学图书馆

Evaluation Methodologies in software protection Research

ACM COMPUTING SURVEYS 2025年第4期57卷 1-41页

作者： De Sutter, Bjorn Schrittwieser, Sebastian Coppens, Bart Kochberger, Patrick Univ Ghent Elect & Informat Syst Ghent Belgium Univ Vienna Christian Doppler Lab Assurance & Transparency Sof Vienna Austria St Polten Univ Appl Sci Inst IT Secur Res St Polten Austria

Man-at-the-end (MATE) attackers have full control over the system on which the attacked software runs, and try to break the confidentiality or integrity of assets embedded in the software. Both companies and malware authors want to prevent such attacks. This has driven an arms race between attackers and defenders, resulting in a plethora of different protection and analysis methods. However, it remains difficult to measure the strength of protections because MATE attackers can reach their goals in many different ways and a universally accepted evaluation methodology does not exist. This survey systematically reviews the evaluation methodologies of papers on obfuscation, a major class of protections against MATE attacks. For 571 papers, we collected 113 aspects of their evaluation methodologies, ranging from sample set types and sizes, over sample treatment, to performed measurements. We provide detailed insights into how the academic state of the art evaluates both the protections and analyses thereon. In summary, there is a clear need for better evaluation methodologies. We identify nine challenges for software protection evaluations, which represent threats to the validity, reproducibility, and interpretation of research results in the context of MATE attacks and formulate a number of concrete recommendations for improving the evaluations reported in future research papers.

关键词： Survey software protection obfuscation deobfuscation diversification

来源：评论

学校读者我要写书评

暂无评论

software protection and simulation on oblivious RAMs

引用

JOURNAL OF THE ACM 1996年第3期43卷 431-473页

作者： Goldreich, O Ostrovsky, R BELL COMMUN RES INC MORRISTOWNNJ

software protection is one of the most important issues concerning computer practice. There exist many heuristics and ad-hoc methods for protection, but the problem as a whole has not received the theoretical treatment it deserves. In this paper, we provide theoretical treatment of software protection. We reduce the problem of software protection to the problem of efficient simulation on oblivious RAM. A machine is oblivious if the sequence in which it accesses memory locations is equivalent for any two inputs with the same running time. For example, an oblivious Turing Machine is one for which the movement of the heads on the tapes is identical for each computation. (Thus, the movement is independent of the actual input.) What is the slowdown in the running time of a machine, if it is required to be oblivious? In 1979, Pippenger and Fischer showed how a two-tape oblivious Turing Machine can simulate, on-line, a one-tape Turing Machine, with a logarithmic slowdown in the running time. We show an analogous result for the random-access machine (RAM) model of computation. In particular, we show how to do an on-line simulation of an arbitrary RAM by a probabilistic oblivious RAM with a polylogarithmic slowdown in the running time. On the other hand, we show that a logarithmic slowdown is a lower bound.

关键词： pseudorandom functions simulation of random access machines software protection

来源：评论

学校读者我要写书评

暂无评论

software protection Using Dynamic PUFs

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2020年 15卷 2053-2068页

作者： Xiong, Wenjie Schaller, Andre Katzenbeisser, Stefan Szefer, Jakub Yale Univ Dept Elect Engn New Haven CT 06520 USA Tech Univ Darmstadt Comp Sci Dept D-64289 Darmstadt Germany Univ Passau Comp Engn D-94032 Passau Germany

Low-end computing devices are becoming increasingly ubiquitous, especially due to the widespread deployment of Internet-of-Things products. There is, however, much concern about sensitive data being processed on these low-end devices which have limited protection mechanisms in place. This paper proposes a Hardware-Entangled software protection (HESP) scheme that leverages hardware features to protect software code from malicious modification before or during run-time. It also enables implicit hardware authentication. Thus, the software will execute correctly only on an authorized device and if the timing of the software, e.g., control flow, was not changed through malicious modifications. The proposed ideas are based on the new concept of Dynamic Physically Unclonable Functions (PUFs). Dynamic PUFs have time-varying responses and can be used to tie the software execution to the timing of software and the physical properties of a hardware device. It is further combined with existing approaches for code self-checksumming, software obfuscation, and call graph and register value scrambling to create the HESP scheme. HESP is demonstrated on commodity, off-the-shelf computing devices, where a DRAM PUF is used as an instance of a Dynamic PUF. The protection scheme can be applied automatically to LLVM Intermediate Representation (IR) code through an AutoPatcher written in Python. For a sample program containing AES encryption and decryption routine, HESP introduces 48% execution time overhead and increases the binary file size by 32.5%, which is moderate compared to other schemes such as software obfuscation. It takes about 2.6 seconds on average for the tested programs to be patched and compiled through the modified compilation flow and scripts.

关键词： software Hardware Random access memory Feature extraction Timing software protection Runtime Physically unclonable functions (PUFs) software protection DRAM hardware-software binding

来源：评论

学校读者我要写书评

暂无评论

software protection through anti-debugging

引用

IEEE SECURITY & PRIVACY 2007年第3期5卷 82-84页

作者： Gagnon, Michael N. Taylor, Stephen Ghosh, Anup K. George Mason University

This column presents the reverse engineering battle from an anti-debugging perspective.

关键词： software protection Reverse Engineering Anti Debugging Debugging

来源：评论

学校读者我要写书评

暂无评论

software protection with Encryption and Verification 1

引用

Pacific-Asia Conference on Knowledge Engineering and software Engineering

作者： Liu, Wentao Wuhan Polytech Univ Dept Comp & Informat Engn Wuhan 430023 Hubei Provice Peoples R China

ISBN: (数字)9783642253492

ISBN: (纸本)9783642253485

The software protection is the key technology for the shareware and it can delay and prevent the software reverse and cracking. There are many methods such as junk code, anti-debug, virtual machine, deformation, packers, encryption and verification. The software registration is the most important step of protection and it can be implemented by many forms such as network registration, license key or file, dongle. This paper introduces and compares these protection methods. Some architectures of protection based on encryption and verification are provided and they are realized by RSA encryption and many verification methods which include self verification and key data verification. The method use the exe file and DLL file to protect each other and use the license file to check and provide software function. The method uses the RSA in the license key file to register and it can make it difficult to create the key generator for the cracker.

关键词： software protection encryption verification

来源：评论

学校读者我要写书评

暂无评论

software protection with Increased Complexity and Obfuscation 12

Software Protection with Increased Complexity and Obfuscatio...

引用

50th Annual Association-for-Computing-Machinery (ACM) Southeast Conference

作者： Tsui, Frank Duggins, Sheryl Karam, Orlando Southern Polytech State Univ Marietta GA 30060 USA

ISBN: (纸本)9781450312035

While many software solutions are provided through open source, the question of proprietary interest still remains. When outsourcing parts of a product's software development, there's a risk that the outsourcing partners will become competitors in the future. In this paper we propose an approach to protect proprietary software by increasing its complexity, to prevent reverse engineering. We introduce four Conjectures for protecting our software through obfuscation and explore and provide rationale for why these four Conjectures make logical sense and should be considered for further formal experiments.

关键词： software protection complexity intellectual property

来源：评论

学校读者我要写书评

暂无评论

KeySplitWatermark: Zero Watermarking Algorithm for software protection Against Cyber-Attacks

引用

IEEE ACCESS 2020年 8卷 72650-72660页

作者： Iwendi, Celestine Jalil, Zunera Javed, Abdul Rehman Reddy, Thippa G. Kaluri, Rajesh Srivastava, Gautam Jo, Ohyun Cent South Univ Forestry & Technol Dept Elect BCC Changsha 410004 Peoples R China Air Univ Dept Cyber Secur Islamabad 44000 Pakistan Air Univ Natl Ctr Cyber Secur Islamabad 44000 Pakistan VIT Sch Informat Technol & Engn Vellore 632014 Tamil Nadu India Brandon Univ Dept Math & Comp Sci Brandon MB R7A 6A9 Canada China Med Univ Res Ctr Interneural Comp Taichung 40402 Taiwan Chungbuk Natl Univ Coll Elect & Comp Engn Dept Comp Sci Cheongju 28644 South Korea

Cyber-attacks are evolving at a disturbing rate. Data breaches, ransomware attacks, crypto-jacking, malware and phishing attacks are now rampant. In this era of cyber warfare, the software industry is also growing with an increasing number of software being used in all domains of life. This evolution has added to the problems of software vendors and users where they have to prevent a wide range of attacks. Existing watermark detection solutions have a low detection rate in the software. In order to address this issue, this paper proposes a novel blind Zero code based Watermark detection approach named KeySplitWatermark, for the protection of software against cyber-attacks. The algorithm adds watermark logically into the code utilizing the inherent properties of code and gives a robust solution. The embedding algorithm uses keywords to make segments of the code to produce a key-dependent on the watermark. The extraction algorithms use this key to remove watermark and detect tampering. When tampering increases to a certain user-defined threshold, the original software code is restored making it resilient against attacks. KeySplitWatermark is evaluated on tampering attacks on three unique samples with two distinct watermarks. The outcomes show that the proposed approach reports promising results against cyber-attacks that are powerful and viable. We compared the performance of our proposal with state-of-the-art works using two different software codes. Our results depict that KeySplitWatermark correctly detects watermarks, resulting in up to 15.95 and 17.43 percent reduction in execution time on given code samples with no increase in program size and independent of watermark size.

关键词： Watermarking software algorithms Heuristic algorithms Malware software protection Cyber-attacks watermarking software algorithm blind detection attack models security

来源：评论

学校读者我要写书评

暂无评论

A Method for Construction of software protection Technology Application Sequence Based on Petri Net With Inhibitor Arcs

引用

IEEE ACCESS 2018年 6卷 11988-12000页

作者： Su, Qing He, Fan Wu, Naiqi Lin, Zhiyi Guangdong Univ Technol Sch Comp Sci & Technol Guangzhou 510006 Guangdong Peoples R China Macau Univ Sci & Technol Inst Syst Engn Macau 999078 Peoples R China

In the field of software protection, when there is a dependence between the various software protection technologies, the application order of these technologies must be arranged in a correct way in order to maximize the protection effect. When applying these technologies in a random way as the traditional methods do, an unexpected consequence may be produced, such as weakening the software protection effect and causing the protected software malfunction. To solve this problem, in this paper, a Petri net model is developed to describe the dependence behavior of applying multiple protection technologies. Then, algorithm is proposed to generate the reachable marking graph for the obtained Petri model. In considering different user requirements, based on the reachable marking graph, a method is presented to obtain a user-required and correct sequence of applying multiple protection technologies. The correctness of the obtained sequence is verified by a finite state automaton model. Experimental results show that the proposed method outperforms the traditional ones.

关键词： Code obfuscation Petri nets software protection software protection technology

来源：评论

学校读者我要写书评

暂无评论

Some reflections on the duality of regime for software protection in the European Union

引用

COMPUTER LAW & SECURITY REVIEW 2013年第3期29卷 282-288页

作者： Polanski, Paul Przemyslaw Kozminski Univ Dept Informat Syst Warsaw Poland

Although the framework for protection of computer programs has been established in the European Union more than two decades ago, it has not undergone any major changes. Opinions of Advocate General Yves Bot have convinced the Court to advance the concept of the plurality of copyright regimes applicable to software: source code, object code and documentation would be protected under the software Directive, whereas interfaces, programming languages, data formats and software manuals are dealt with as literary works under the InfoSoc Directive. In SAS Institute v WPL, the Court also ruled that copyright in a computer program cannot be infringed where the lawful acquirer of the license neither decompiled the object code nor copied the source code of the computer program, but merely studied, observed and tested that program in order to reproduce its functionality in a second program. This ruling paves the way and acknowledges the reverse engineering efforts on the Old Continent. (C) 2013 Paul Przemyslaw Polanski. Published by Elsevier Ltd. All rights reserved.

关键词： software protection 2009/24/EC 91/250/EEC SAS Institute v WPL Copyright protection Reverse engineering software Functional works 2001/29/EC

来源：评论

学校读者我要写书评

暂无评论

High-performance software protection using reconfigurable architectures

引用

PROCEEDINGS OF THE IEEE 2006年第2期94卷 419-431页

作者： Zambreno, J Honbo, D Choudhary, A Simha, R Narahari, B Northwestern Univ Dept Elect & Comp Engn Evanston IL 60208 USA George Washington Univ Dept Comp Sci Washington DC 20052 USA

One of the key problems facing the computer industry today is ensuring the integrity of end-user applications and data. Researchers in the relatively newfield of software protection investigate the development and evaluation of controls that prevent the unauthorized modification or use of system software. While many previously developed protection schemes have provided a strong level of security their overall effectiveness has been hindered by a lack of transparency to the user in terms of performance overhead. Other approaches take to the opposite extreme and sacrifice security for the sake of this transparency. In this work we present an architecture for software protection that provides for a high level of both security and user transparency by utilizing field programmable gate array (FPGA) technology is the main protection mechanism. We demonstrate that by relying on FPGA technology, this approach can accelerate the execution of programs in a cryptographic environment, while Maintaining the flexibility through reprogramming to carry out any compiler-driven protections that may be application-specific.

关键词： field programmable gate arrays (FPGAs) reconfigurable architectures security software protection

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：