Review of path branch obfuscation

Pu GENG; Yuefei ZHU

doi:10.11959/j.issn.2096-109x.2020027

您当前的位置：

首页 >

文章列表页 >

Review of path branch obfuscation

Comprehensive Reviews | 更新时间：2024-06-03

- Review of path branch obfuscation
- Chinese Journal of Network and Information Security Vol. 6, Issue 2, Pages: 12-18(2020)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2020027
  CLC： TP311
- Online First：2020-04，
  
  Published：15 April 2020
- 稿件说明：
移动端阅览
Pu GENG, Yuefei ZHU. Review of path branch obfuscation[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 12-18.
DOI：

Pu GENG, Yuefei ZHU. Review of path branch obfuscation[J]. Chinese Journal of Network and Information Security, 2020, 6(2): 12-18. DOI： 10.11959/j.issn.2096-109x.2020027.

摘要

代码混淆是一种便捷、有效的软件保护方法，能够较好地对抗以逆向分析为基础的MATE攻击，随着以符号执行为基础的自动程序分析技术的发展，出现了能够抵抗符号执行的新代码混淆方法——路径分支混淆。依据路径分支信息的构成，以及分支信息在对抗符号执行分析上的差异，对分支混淆技术进行了分类，并给出了分支信息泄露与符号执行的联系；按照分支混淆的分类，对当前分支混淆的研究进展进行了介绍和总结，分析了各类分支混淆的优缺点；最后，对分支混淆技术的发展进行了展望。

Abstract

Code obfuscation is a convenient and effective technique of software protection

which can combat MATE attacks based on reverse engineering.With the development of automatic programming analysis technology

a new code obfuscation technique which named path branch obfuscation was proposed to defeat symbolic execution.With the composition of branch information and how does the branch composition effect in execution technique

the branch obfuscation was classified into three types.Then

a detailed research and development situation of each branch obfuscation class was exhaustively described.At last

the prospects of branch obfuscation were discussed.

关键词

Keywords

references

COLLBERG C , THOMBORSON C , LOW D . A taxonomy of obfuscating transformations [R ] . Department of Computer Science,The University of Auckland,New Zealand , 1997 .

MAVROGIANNOPOULOS N , KISSERLI N , PRENEEL B . A taxonomy of self-modifying code for obfuscation [J ] . Computers ＆Security , 2011 , 30 ( 8 ): 679 - 691 .

AVIDAN E , FEITELSON D G . From obfuscation to comprehension [C ] // 2015 IEEE 23rd International Conference on Program Comprehension . 2015 : 178 - 181 .

杨宇波 . 代码混淆模型研究 [D ] . 北京:北京邮电大学 , 2015 .

YANG Y B . Research on code obfuscation model [D ] . Beijing:Beijing University of Posts and Telecommunications , 2015 .

BANESCU S , COLLBERG C , GANESH V , et al . Code obfuscation against symbolic execution attacks [C ] // The 32nd Annual Conference on Computer Security Applications . 2016 : 189 - 200 .

BALACHANDRAN V , EMMANUEL S . Potent and stealthy control flow obfuscation by stack based self-modifying code [J ] . IEEE Transactions on Information Forensics and Security , 2013 , 8 ( 4 ): 669 - 681 .

LIN H , ZHANG X , YONG M , et al . Branch obfuscation using binary code side effects [C ] // International Conference on Computer,Networks and Communication Engineering (ICCNCE 2013) . 2013 .

贾春福 , 王志 , 刘昕 , 等 . 路径模糊:一种有效抵抗符号执行的二进制混淆技术 [J ] . 计算机研究与发展 , 2011 , 48 ( 11 ): 2111 - 2119 .

JIA C F , WANG Z , LIU X , et al . Branch obfuscation:an efficient binary code obfuscation to impede symbolic execution [J ] . Journal of Computer Research and Development , 2011 , 48 ( 11 ): 2111 - 2119 .

SHARIF M I , LANZI A , GIFFIN J T , et al . Impeding malware analysis using conditional code obfuscation [C ] // NDSS . 2008 .

王志 . 二进制代码路径混淆技术研究 [D ] . 天津:南开大学 , 2012 .

WANG Z . Research on binary code obfuscation [D ] . Tianjin:Nankai University , 2012 .

王志 , 贾春福 , 刘伟杰 , 等 . 一种抵抗符号执行的路径分支混淆技术 [J ] . 电子学报 , 2015 , 43 ( 5 ): 870 - 878 .

WANG Z , JIA C F , LIU W J , et al . Branch obfuscation to combat symbolic execution [J ] . Acta Electronica Sinica , 2015 , 43 ( 5 ): 870 - 878 .

WANG Z , MING J , JIA C F , et al . Linear obfuscation to combat symbolic execution [C ] // European Symposium on Research in Computer Security . 2011 .

ZONG N , JIA C F . Branch obfuscation using" black boxes" [C ] // 2014 Theoretical Aspects of Software Engineering Conference . 2014 : 114 - 121 .

MA H , MA X , LIU W , et al . Control flow obfuscation using neural network to fight concolic testing [C ] // International Conference on Security ＆ Privacy in Communication Systems . 2014 .

陈喆 , 贾春福 , 宗楠 , 等 . 随机森林在程序分支混淆中的应用 [J ] . 电子学报 , 2018 , 46 ( 10 ): 156 - 164 .

CHEN Z , JIA C F , ZONG N , et al . Branch obfuscation using random forest [J ] . Acta Electronica Sinica , 2018 , 46 ( 10 ): 156 - 164 .

MA H , LI R , YU X , et al . Integrated Software fingerprinting vianeural-network-based control flow obfuscation [J ] . IEEE Transactions on Information Forensics ＆ Security , 2016 , 11 ( 10 ): 2322 - 2337 .

WANG Z , JIA C F , LIU M , et al . Branch obfuscation using code mobility and signal [C ] // IEEE Computer Software ＆ Applications Conference Workshops . 2012 .

陈喆 , 王志 , 王晓初 , 等 . 基于代码移动的二进制程序控制流混淆方法 [J ] . 计算机研究与发展 , 2015 , 52 ( 8 ): 1902 - 1909 .

CHEN Z , WANG Z , WANG X C , et al . Using code mobility to obfuscate control flow in binary codes [J ] . Journal of Computer Research and Development , 2015 , 52 ( 8 ): 1902 - 1909 .

POPOV I V , DEBRAY S K , ANDREWS G R . Binary obfuscation using signals [C ] // USENIX Security Symposium . 2007 : 275 - 290 .

Views

256

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

DNNobfus: a study on obfuscation-based edge-side model protection framework

Constructing method of opaque predicate based on type conversion and operation of floating point numbers

Metrics for code obfuscation based on symbolic execution and N-scope complexity

Anti-obfuscation Android application similarity detection method based on API call

Related Author

WANG Yang

YANG Xiaolin

ZHANG Liqiang

CHENG Binlin

YAN Fei

ZHAO Xinmiao

SONG Feiyang

Yawen WANG

Related Institution

Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering,Wuhan University

School of Cyber Science and Technology, Shandong University

Inspur Intelligent Technology Company Limited

Inspur Academy of Science and Technology

School of Cyberspace Security，Beijing University of Post and Telecommunications

⁰