arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1506.03032cs.CRcs.PL
收藏

N版本混淆:利用程序多样性阻止软件篡改复制

N-Version Obfuscation: Impeding Software Tampering Replication with Program Diversity

Hui Xu, Yangfan Zhou, Michael R. Lyu

摘要:

防篡改是软件安全的一个重要研究领域。已经提出了许多方法来阻止特定的篡改过程,例如,混淆和自校验和。然而,据我们所知,它们都不能达到理论上的防篡改。我们的想法是通过程序的多样化来阻止篡改的复制,从而增加破解整个软件系统的复杂性。为此,我们建议提供相同的功能,但功能不等同的软件副本到不同的机器。我们正式定义的问题N版本混淆,并提供了一个可行的手段来解决这个问题。我们的评估结果表明,打破软件系统所需的时间是线性增加的软件版本的数量,这是O(n)的复杂度。

英文摘要:

Tamper-resistance is a fundamental software security research area. Many approaches have been proposed to thwart specific procedures of tampering, e.g., obfuscation and self-checksumming. However, to our best knowledge, none of them can achieve theoretically tamper-resistance. Our idea is to impede the replication of tampering via program diversification, and thus increasing the complexity to break the whole software system. To this end, we propose to deliver same featured, but functionally nonequivalent software copies to different machines. We formally define the problem as N-version obfuscation, and provide a viable means to solve the problem. Our evaluation result shows that the time required for breaking a software system is linearly increased with the number of software versions, which is O(n) complexity.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑