• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Proceedings of the IASTED international conferences on informatics 2010 >A SOFTWARE PROTECTION METHOD BASED ON TIME-SENSITIVE CODE AND SELF-MODIFICATION MECHANISM
【24h】

A SOFTWARE PROTECTION METHOD BASED ON TIME-SENSITIVE CODE AND SELF-MODIFICATION MECHANISM

机译：基于时间敏感码和自修改机制的软件保护方法

获取原文
获取原文并翻译 | 示例
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

This paper proposes a systematic method for protectingrnsoftware against malicious reverse engineering attacks.rnOur method aims to increase the cost of obtaining secretrninformation in a program on the assumption that the adversariesrnhave the ability to perform dynamic analysis as muchrnas static analysis. A program protected by our methodrncontains many time-sensitive codes, which are overwrittenrnwith fake (dummy) codes. Each time-sensitive codernis modified during execution via self-modification accordingrnto the time taken to execute a designated block of thernprogram. If the execution time of the block is within thernpredetermined range, the time-sensitive code becomes thernoriginal one. On the other hand, if the execution time is outrnof the range, the time-sensitive code becomes the other fakernone. In order to obtain the secret information by static analysis,rnthe adversary must find the routines that modify timesensitiverncodes which are scattered over the program, andrnmust guess the predetermined valid execution time of therntarget blocks. In order to obtain the secret information byrndynamic analysis, the adversary must make the executionrnreach the restricted points of the program without stoppingrnthe execution. As a result, our method helps to constructrnhighly invulnerable software.
机译：本文提出了一种保护软件免受恶意逆向工程攻击的系统方法。我们的方法旨在在假设对手具有像静态分析一样执行动态分析能力的前提下，增加在程序中获取秘密信息的成本。受我们的方法保护的程序包含许多对时间敏感的代码，这些代码被伪造的（伪）代码覆盖。每个时间敏感的编码器在执行期间通过自我修改根据执行程序的指定块所花费的时间进行修改。如果该块的执行时间在预定范围内，则对时间敏感的代码将成为原始代码。另一方面，如果执行时间超出范围，则对时间敏感的代码将成为另一个伪造的对象。为了通过静态分析获得机密信息，对手必须找到修改时间敏感代码的例程，这些代码分散在程序中，并且必须猜测目标块的预定有效执行时间。为了通过动态分析获得秘密信息，对手必须使执行程序达到程序的限制点，而又不停止执行程序。结果，我们的方法有助于构建高度安全的软件。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号