• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>Program Comprehension, 2009. ICPC '09 >The effectiveness of source code obfuscation: An experimental assessment
【24h】

The effectiveness of source code obfuscation: An experimental assessment

机译：源代码混淆的有效性：一项实验评估

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Source code obfuscation is a protection mechanism widely used to limit the possibility of malicious reverse engineering or attack activities on a software system. Although several code obfuscation techniques and tools are available, little knowledge is available about the capability of obfuscation to reduce attackers' efficiency, and the contexts in which such an efficiency may vary. This paper reports the outcome of two controlled experiments meant to measure the ability of subjects to understand and modify decompiled, obfuscated Java code, compared to decompiled, clear code. Results quantify to what extent code obfuscation is able to make attacks more difficult to be performed, and reveal that obfuscation can mitigate the effect of factors that can alter the likelihood of a successful attack, such as the attackers' skill and experience, or the intrinsic characteristics of the system under attack.
机译：源代码混淆是一种保护机制，广泛用于限制对软件系统进行恶意逆向工程或攻击活动的可能性。尽管可以使用几种代码混淆技术和工具，但是关于混淆降低攻击者效率的能力以及这种效率可能发生变化的上下文的知识很少。本文报告了两个受控实验的结果，该实验旨在衡量受试者与反编译，清晰的代码相比，理解和修改反编译，混淆的Java代码的能力。结果量化了代码混淆能够在多大程度上使攻击更难以执行，并揭示了混淆可以减轻可能改变成功攻击可能性的因素的影响，例如攻击者的技能和经验或内在因素。受攻击系统的特征。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号