論文

査読有り
2019年7月

On Preventing Symbolic Execution Attacks by Low Cost Obfuscation

2019 20th IEEE/ACIS International Conference on Software Engineering, Artificial Intelligence, Networking and Parallel/Distributed Computing (SNPD)
  • Toshiki Seto
  • ,
  • Akito Monden
  • ,
  • Zeynep Yucel
  • ,
  • Yuichiro Kanzaki

開始ページ
495
終了ページ
500
記述言語
英語
掲載種別
研究論文(国際会議プロシーディングス)
DOI
10.1109/snpd.2019.8935642
出版者・発行元
IEEE

While various software obfuscation techniques have been proposed to protect software, new types of threats keep emerging such as the symbolic execution attacks. Such attacks automatically analyze programs and are not accounted for by many of the existing obfuscation methods. Nevertheless, several methods against symbolic execution attacks exist such as linear obfuscation methods relying on Collatz conjuncture or obfuscation methods based on one-way hash functions. However, these methods bear several issues. Namely, linear obfuscation is weak against manual analysis due to its deterministic output. On the other hand, SHA-1 requires significant computational cost; and thus, it can be applied to only a limited number of targets. Therefore, in this research, we propose to employ a combination of several computationally cheap (arithmetic) obfuscating operations for preventing symbolic execution attacks. Through an experiment using angr and KLEE as symbolic execution tools, we demonstrate that obfuscation operation using array reference, bit rotation and XOR effectively prevents symbolic execution attacks at a low computational cost.

リンク情報
DOI
https://doi.org/10.1109/snpd.2019.8935642
Web of Science
https://gateway.webofknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcAuth=JSTA_CEL&SrcApp=J_Gate_JST&DestLinkType=FullRecord&KeyUT=WOS:000527791900078&DestApp=WOS_CPL
URL
http://xplorestaging.ieee.org/ielx7/8932629/8935640/08935642.pdf?arnumber=8935642
Scopus
https://www.scopus.com/inward/record.uri?partnerID=HzOxMe3b&scp=85077954565&origin=inward
Scopus Citedby
https://www.scopus.com/inward/citedby.uri?partnerID=HzOxMe3b&scp=85077954565&origin=inward
ID情報
  • DOI : 10.1109/snpd.2019.8935642
  • ISBN : 9781728116518
  • SCOPUS ID : 85077954565
  • Web of Science ID : WOS:000527791900078

エクスポート
BibTeX RIS