Title: | A framework for quantitative evaluation of parallel control-flow obfuscation |
Authors: | Huang, Yu-Lun Tsai, Hsin-Yi 電控工程研究所 Institute of Electrical and Control Engineering |
Keywords: | Software obfuscation;Security evaluation;Reverse engineering;Software metrics;Control flow graph |
Issue Date: | 1-Nov-2012 |
Abstract: | Software obfuscation is intended to protect a program by thwarting reverse engineering. Several types of software obfuscation have been proposed, and control-flow obfuscation is a commonly adopted one. In this paper, we present a framework to evaluate parallel control-flow obfuscation, which raises difficulty of reverse engineering by increasing parallelism of a program. We also define a control flow graph of a program and some atomic operators for obfuscating transformations. The proposed framework comprises three phases: parsing, formalization and evaluation. A program is first parsed to a control flow graph. Then, we formalize a parallel control-flow obfuscating transformation based on our atomic operators. By selecting target code blocks in the control flow graph and applying obfuscating transformations to the target code blocks, the original program is then obfuscated. In the third phase, we define a measure to calculate the program complexity. The measure can be considered as a degree to which an obfuscating transformation can confuse a human trying to understand the obfuscated program. Such a measure can also be used as the base of the potency metric to estimate the capability of the obfuscated program against reverse engineering. Our novel framework helps efficiently examine a control-flow obfuscating transformation in a systematic manner and helps select an appropriate obfuscating transformation among a number of candidates to better protect a program. (C) 2012 Elsevier Ltd. All rights reserved. |
URI: | http://dx.doi.org/10.1016/j.cose.2012.08.003 http://hdl.handle.net/11536/20881 |
ISSN: | 0167-4048 |
DOI: | 10.1016/j.cose.2012.08.003 |
Journal: | COMPUTERS & SECURITY |
Volume: | 31 |
Issue: | 8 |
Begin Page: | 886 |
End Page: | 896 |
Appears in Collections: | Articles |
Files in This Item:
If it is a zip file, please download the file and unzip it, then open index.html in a browser to view the full text content.