Data Tainting and Obfuscation: Improving Plausibility of Incorrect Taint - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2015

Data Tainting and Obfuscation: Improving Plausibility of Incorrect Taint

Résumé

—Code obfuscation is designed to impede the reverse engineering of a binary software. Dynamic data tainting is an analysis technique used to identify dependencies between data in a software. Performing dynamic data tainting on obfuscated software usually yields hard to exploit results, due to over-tainted data. Such results are clearly identifiable as useless: an attacker will immediately discard them and opt for an alternative tool. In this paper, we present a code transformation technique meant to prevent the identification of useless results: a few lines of code are inserted in the obfuscated software, so that the results obtained by the dynamic data tainting approach appear acceptable. These results remain however wrong and lead an attacker to waste enough time and resources trying to analyze incorrect data dependencies, so that he will usually decide to use less automated and advanced analysis techniques, and maybe give up reverse engineering the current binary software. This improves the security of the software against malicious analysis.
Fichier principal
Vignette du fichier
SCAM_v2.pdf (1.16 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01193286 , version 1 (04-09-2015)

Licence

Copyright (Tous droits réservés)

Identifiants

  • HAL Id : hal-01193286 , version 1

Citer

Sandrine Blazy, Stéphanie Riaud, Thomas Sirvent. Data Tainting and Obfuscation: Improving Plausibility of Incorrect Taint. Source Code Analysis and Manipulation (SCAM), Sep 2015, Bremen, Germany. ⟨hal-01193286⟩
494 Consultations
800 Téléchargements

Partager

More