原生软件保护的代码可更新性
Code Renewability for Native Software Protection
摘要:
软件保护旨在通过防止和延迟逆向工程和篡改攻击来保护嵌入在软件中的资产。本文提出了一种动态更新本地应用程序的体系结构和支持工具流程。属于原始应用程序或链接保护的更新和多样化的代码和数据可按需从安全服务器交付给客户端。这导致软件组件在受到攻击时频繁更改,从而使攻击变得更加困难。通过支持各种形式的多样化和可再生性,可以提供新的保护组合,现有的组合变得更加强大。原型实现在一些工业用例上进行了评估。
英文摘要:
Software protection aims at safeguarding assets embedded in software by preventing and delaying reverse engineering and tampering attacks. This paper presents an architecture and supporting tool flow to renew parts of native applications dynamically. Renewed and diversified code and data belonging to either the original application or to linked-in protections are delivered from a secure server to a client on demand. This results in frequent changes to the software components when they are under attack, thus making attacks harder. By supporting various forms of diversification and renewability, novel protection combinations become available, and existing combinations become stronger. The prototype implementation is evaluated on a number of industrial use cases.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。