標題: A framework for quantitative evaluation of parallel control-flow obfuscation
作者: Huang, Yu-Lun
Tsai, Hsin-Yi
電控工程研究所
Institute of Electrical and Control Engineering
關鍵字: Software obfuscation;Security evaluation;Reverse engineering;Software metrics;Control flow graph
公開日期: 1-十一月-2012
摘要: Software obfuscation is intended to protect a program by thwarting reverse engineering. Several types of software obfuscation have been proposed, and control-flow obfuscation is a commonly adopted one. In this paper, we present a framework to evaluate parallel control-flow obfuscation, which raises difficulty of reverse engineering by increasing parallelism of a program. We also define a control flow graph of a program and some atomic operators for obfuscating transformations. The proposed framework comprises three phases: parsing, formalization and evaluation. A program is first parsed to a control flow graph. Then, we formalize a parallel control-flow obfuscating transformation based on our atomic operators. By selecting target code blocks in the control flow graph and applying obfuscating transformations to the target code blocks, the original program is then obfuscated. In the third phase, we define a measure to calculate the program complexity. The measure can be considered as a degree to which an obfuscating transformation can confuse a human trying to understand the obfuscated program. Such a measure can also be used as the base of the potency metric to estimate the capability of the obfuscated program against reverse engineering. Our novel framework helps efficiently examine a control-flow obfuscating transformation in a systematic manner and helps select an appropriate obfuscating transformation among a number of candidates to better protect a program. (C) 2012 Elsevier Ltd. All rights reserved.
URI: http://dx.doi.org/10.1016/j.cose.2012.08.003
http://hdl.handle.net/11536/20881
ISSN: 0167-4048
DOI: 10.1016/j.cose.2012.08.003
期刊: COMPUTERS & SECURITY
Volume: 31
Issue: 8
起始頁: 886
結束頁: 896
顯示於類別:期刊論文


文件中的檔案:

  1. 000312677200004.pdf

若為 zip 檔案,請下載檔案解壓縮後,用瀏覽器開啟資料夾中的 index.html 瀏覽全文。