Constructing method of opaque predicate based on type conversion and operation of floating point numbers

Qingfeng WANG; Hao LIANG; Yawen WANG; Genlin XIE; Benwei HE

doi:10.11959/j.issn.2096-109x.2023068

您当前的位置：

首页 >

文章列表页 >

Constructing method of opaque predicate based on type conversion and operation of floating point numbers

Papers | 更新时间：2024-06-03

- Constructing method of opaque predicate based on type conversion and operation of floating point numbers
- Chinese Journal of Network and Information Security Vol. 9, Issue 5, Pages: 48-58(2023)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2023068
  CLC： TP393
- Online First：2023-10，
  
  Published：25 October 2023
- 稿件说明：
移动端阅览
Qingfeng WANG, Hao LIANG, Yawen WANG, et al. Constructing method of opaque predicate based on type conversion and operation of floating point numbers[J]. Chinese Journal of Network and Information Security, 2023, 9(5): 48-58.
DOI：

Qingfeng WANG, Hao LIANG, Yawen WANG, et al. Constructing method of opaque predicate based on type conversion and operation of floating point numbers[J]. Chinese Journal of Network and Information Security, 2023, 9(5): 48-58. DOI： 10.11959/j.issn.2096-109x.2023068.

摘要

随着软件功能的日趋复杂和网络攻击技术的不断演进，软件盗版、软件破解、数据泄露、软件恶意修改等恶意行为呈上升趋势，软件安全问题逐渐成为行业领域普遍关注的焦点和研究方向。代码混淆是一种典型的对抗逆向工程的软件保护技术，它能够在保持程序原有功能不变的条件下加大攻击者对程序进行分析和理解的难度，被广泛应用和深入研究。现有的代码混淆技术大多由于追求混淆效果而普遍存在性能损耗偏高、隐蔽性差等问题。控制结构混淆是代码混淆技术中应用较广泛的一种，它通过扰乱程序的控制流从而提高代码逆向工程难度，不透明谓词混淆是其一大分支。为了弥补现有代码混淆技术的缺陷，提出了基于浮点数类型转换和运算的不透明谓词构造方法，利用计算机浮点数类型转换和运算过程中伴随的精度损失现象使特定条件下产生与常理相悖的运算结果，通过选择若干个小数进行强制类型转换、加法运算和乘法运算，基于其运算结果统计可以构造一系列不透明谓词，实现代码混淆功能。相较于传统的不透明谓词，该构造方法具有隐蔽性高、通用性好、可逆性、开销低等优点。实验验证表明，该方法在大幅降低攻击者对软件进行逆向工程等工作速度的同时，对于符号执行等动态分析技术具有良好的抵御性能。

Abstract

With the increasing complexity of software functions and the evolving technologies of network attacks

malicious behaviors such as software piracy

software cracking

data leakage

and malicious software modification are on the rise.As a result

software security has become a focal point in industry research.Code obfuscation is a common software protection technique used to hinder reverse engineering.It aims to make program analyzing and understanding more difficult for attackers while preserving the original program functionality.However

many existing code obfuscation techniques suffer from performance loss and poor concealment in pursuit of obfuscation effectiveness.Control flow obfuscation

particularly opaque predicate obfuscation

is widely used to increase the difficulty of code reverse engineering by disrupting the program’s control flow.A method was proposed to address the limitations of existing code obfuscation techniques.It utilized the phenomenon of precision loss that occurred during type conversion and floating-point number operations in computers.Under certain conditions

this method produced operation results that contradict common sense.By performing forced type conversion

addition

and multiplication with selected decimal numbers

a series of opaque predicates can be constructed based on the statistical analysis of their operation results.This approach achieved code obfuscation with high concealment

good generality

reversibility

and low overhead compared to traditional opaque predicates.Experimental verification demonstrates that this method significantly slows down attackers’ reverse engineering efforts and exhibits good resistance to dynamic analysis techniques such as symbolic execution.

关键词

Keywords

references

奇安信代码安全实验室 . 2022 中国软件供应链安全分析报告 [EB ] .

Qi An Xin Code Security Lab . 2022 China software supply chain security analysis report [EB ] .

BSA Global Software Survey . Software management:security imperative,business opportunity [EB ] .

张汉宁 . 基于精简指令集的软件保护虚拟机技术研究 [D ] . 西安:西北大学 , 2010 .

ZHANG H N . Research on software protection virtual machine technology based on reduced instruction set [D ] . Xi'an:Northwest University , 2010 .

SHERIDAN B , SHERR M . On manufacturing resilient opaque constructs against static analysis [J ] . Springer International Publishing , 2016 .

COLLBERG C , THOMBORSON C , LOW D . A taxonomy of obfuscating transformations [J ] . Technical Report , 1997 .

李成扬 , 黄天波 , 陈夏润 , 等 . LLVM 中间语言的控制流混淆方案 [J ] . 计算机工程与应用 , 2023 ,( 4 ): 1 - 8 .

LI C Y , HUANG T B , CHEN X R , et al . Control flow obfuscation scheme for LLVM intermediate languages [J ] . Computer Engineering and Applications , 2023 ,( 4 ): 1 - 8 .

LÁSZLÓ T , KISS A . Obfuscating C++ programs via control flow flattening [R ] . 2009 .

ROLLES R . Unpacking virtualization obfuscators [C ] // Proceedings of the 3rd USENIX Conference on Offensive Technologies . 2009 .

KUANG K , TANG Z , GONG X , et al . Exploiting dynamic scheduling for VM-based code obfuscation [C ] // 2017 IEEE Trustcom/BigDataSE/I SPA . 2017 .

陈耀阳 . 基于代码混淆的软件保护技术研究与实现 [D ] . 南京:南京邮电大学 , 2021 .

CHEN Y Y . Research and implementation of software protection technology based on code obfuscation [D ] . Nanjing:Nanjing University of Posts and Telecommunications , 2021 .

房鼎益 , 张恒 , 汤战勇 , 等 . 一种抗语义攻击的虚拟化软件保护方法 [J ] . 工程科学与技术 , 2017 , 49 ( 1 ): 159 - 168 .

FANG D Y , ZHANG H , TANG Z Y , et al . DAS-VMP:a virtual machine-based software protection method for defending against semantic attacks [J ] . Advanced Engineering Sciences , 2017 , 49 ( 1 ): 159 - 168 .

汤战勇 , 李光辉 , 房鼎益 , 等 . 一种具有指令集随机化的代码虚拟化保护系统 [J ] . 华中科技大学学报(自然科学版) , 2016 , 44 ( 3 ): 28 - 33 .

TANG Z Y , LI G H , FANG D Y , et al . Code virtualized protection system with instruction set randomization [J ] . Journal of Huazhong University of Science and Technology(Natural Science Edition) , 2016 , 44 ( 3 ): 28 - 33 .

COLLBERG C , THOMBORSON C , LOW D . Manufacturing cheap,resilient,and stealthy opaque constructs [C ] // Proceedings of the 25th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL ’98) . 1998 : 184 - 196 .

袁征 , 冯雁 , 温巧燕 , 等 . 构造一种新的混淆 Java 程序的不透明谓词 [J ] . 北京邮电大学学报 , 2007 , 30 ( 6 ): 103 - 106 .

YUAN Z , FENG Y , WEN Q Y , et al . Manufacture of a new opaque predicate for java programs [J ] . Journal of Beijing University of Posts and Telecom , 2007 , 30 ( 6 ): 103 - 106 .

MOSER A , KRUEGEL C , KIRDA E . Limits of static analysis for malware detection [C ] // Twenty-Third Annual Computer Security Applications Conference (ACSAC 2007) . 2007 .

TIELLA R , CECCATO M . Automatic generation of opaque constants based on the k-clique problem for resilient data obfuscation [C ] // 2017 IEEE 24th International Conference on Software Analysis,Evolution and Reengineering (SANER) . 2017 : 182 - 192 .

SHARIF M , LANZI A , GIFFIN J , et al . Impeding malware analysis using conditional code obfuscation [C ] // Proceedings of the Network and Distributed System Security Symposium (NDSS 2008) . 2008 .

ZHU W , THOMBORSON C . A provable scheme for homomorphic obfuscations in software security [R ] . ACTA Press , 2005 .

ARBOIT G . A method for watermarking Java programs via opaque predicates [C ] // Proc Int Conf Electronic Commerce Research , 2002 .

WANG Z , MING J , JIA C , et al . Linear obfuscation to combat symbolic execution [C ] // European Symposium on Research in Computer Security . 2011 .

付蒙 . 抵抗符号执行的不透明谓词混淆技术研究 [D ] . 西安:西安电子科技大学 , 2019 .

FU M . Research on opaque predicate-based obfuscations against symbolic execution [D ] . Xi’an:Xidian University , 2019 .

KING J C . Symbolic execution and program testing [J ] . Communications of the ACM , 1976 , 19 ( 7 ): 385 - 394 .

MING J , XU D , WANG L , et al . LOOP:logic-oriented opaque predicate detection in obfuscated binary code [C ] // Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security . 2015 : 757 - 768 .

YADEGARI B , JOHANNESMEYER B , WHITELY B , et al . A generic approach to automatic deobfuscation of executable code [C ] // 2015 IEEE Symposium on Security and Privacy . 2015 : 674 - 691 .

BARDIN S , DAVID R , MARION J Y . Backward-bounded DSE:targeting infeasibility questions on obfuscated codes [C ] // 2017 IEEE Symposium on Security and Privacy (SP) . 2017 : 633 - 651 .

BANESCU S , COLLBERG C , GANESH V , et al . Code obfuscation against symbolic execution attacks [C ] // Proceedings of the 32nd Annual Conference on Computer Security Applications . 2016 : 189 - 200 .

王国俊 . 有理数、无理数与实数 [J ] . 数学的实践与认识 , 1998 ( 3 ): 258 - 266 .

WANG G J . Rational,irrational and numbers [J ] . Mathematics in Practice and Theory , 1998 ( 3 ): 258 - 266 .

Views

173

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

DNNobfus: a study on obfuscation-based edge-side model protection framework

Metrics for code obfuscation based on symbolic execution and N-scope complexity

Review of path branch obfuscation

Related Author

SONG Feiyang

ZHAO Xinmiao

YAN Fei

CHENG Binlin

ZHANG Liqiang

YANG Xiaolin

WANG Yang

Yuqiang XIAO

Related Institution

Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, School of Cyber Science and Engineering,Wuhan University

School of Cyber Science and Technology, Shandong University

Inspur Intelligent Technology Company Limited

Inspur Academy of Science and Technology

⁰