【24h】

Hydan: Hiding Information in Program Binaries

机译:Hydan:在程序二进制文件中隐藏信息

获取原文
获取原文并翻译 | 示例

摘要

We present a scheme to steganographically embed information in x86 program binaries. We define sets of functionally-equivalent instructions, and use a key-derived selection process to encode information in machine code by using the appropriate instructions from each set. Such a scheme can be used to watermark (or fingerprint) code, sign executables, or simply create a covert communication channel. We experimentally measure the capacity of the covert channel by determining the distribution of equivalent instructions in several popular operating system distributions. Our analysis shows that we can embed only a limited amount of information in each executable (approximately 1/110 bit encoding rate), although this amount is sufficient for some of the potential applications mentioned. We conclude by discussing potential improvements to the capacity of the channel and other future work.
机译:我们提出了一种将信息隐秘地嵌入x86程序二进制文件中的方案。我们定义了功能等效的指令集,并使用键派生的选择过程通过使用每组中的适当指令在机器代码中编码信息。这样的方案可用于给代码加水印(或指纹),签名可执行文件,或简单地创建秘密通信通道。我们通过确定几种流行的操作系统发行版中等效指令的分布来实验性地测量秘密通道的容量。我们的分析表明,我们只能在每个可执行文件中嵌入有限数量的信息(大约1/110位编码率),尽管对于某些潜在的应用程序来说,此数量已足够。最后,我们讨论了渠道容量的潜在改进以及其他未来工作。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号