No Access

Parametrization and Evaluation of Intermediate Level Obfuscator

Department of Automation and Applied Informatics, Budapest University of Technology and Economics, H-1117, Magyar Tudósok krt. 2., Budapest, Hungary

E-mail Address: dunaev@aut.bme.hu

Search for more papers by this author

and

László Lengyel

Department of Automation and Applied Informatics, Budapest University of Technology and Economics, H-1117, Magyar Tudósok krt. 2., Budapest, Hungary

E-mail Address: lengyel@aut.bme.hu

Search for more papers by this author

https://doi.org/10.1142/S0218194017500371Cited by:0 (Source: Crossref)

Abstract

Obfuscation is a technology that secures software artifacts from reverse engineering by making its cost prohibitively high. Intermediate level obfuscator implements the defensive mechanisms inside the software, and owing to high potency and resilience, can successfully secure the sensitive software components. This paper provides an analysis and parametrization of the obfuscator, as well as a method of fine-tuning and evaluating obfuscating transformations in terms of potency, resilience and cost.

Keywords:

References

1. G. Sallai, Future internet visions and research clusters, Acta Polytech. Hung. 11 (7) (2014) 5–24. Web of Science, Google Scholar
2. M. Popa, Techniques of program code obfuscation for secure software, J. Mobile, Embedded Distr. Syst. 3 (4) (2011). Google Scholar
3. P. Papadopoulos, A. Papadogiannakis, M. Polychronakis, A. Zarras, T. Holz and E. Markatos, k-subscription: Privacy-preserving microblogging browsing through obfuscation, Annual Computer Security Applications Conference, 2013. Google Scholar
4. Z. Brakerski and G. N. Rothblum, Virtual black-box obfuscation for all circuits via generic graded encoding, in Proc. 11th Theory of Cryptography Conference, 2014, pp. 1–25. Google Scholar
5. R. Canetti, H. Lin, S. Tessaro and V. Vaikuntanathan, Obfuscation of probabilistic circuits and applications, LNCS Vol. 9015, 2015, pp. 468–497. Crossref, Google Scholar
6. N. A. Ismail and E. A. O’Brien, Enabling multimodal interaction in web-based personal digital photo browsing, in Proc. Int. Conf. Computer and Communication Engineering, 2008. Google Scholar
7. D. Dunaev and L. Lengyel, Formal considerations and a practical approach to intermediate-level obfuscation, WSEAS Trans. Inf. Sci. Appl. 11 (2014) 32–41. Google Scholar
8. B. Barak, Non-black-box techniques in cryptography, PhD thesis, Department of Computer Science and Applied Mathematics, Weizmann Institute of Science, 2004. Google Scholar
9. B. Barak, O. Goldreich, R. Impagliazzo, S. Rudich, A. Sahai, S. Vadhan and K. Yang, On the (im)possibility of obfuscating programs, in Proc. 21st Annual Int. Cryptology Conf. Advances in Cryptology (Springer-Verlag, 2001), pp. 1–18. Google Scholar
10. S. Goldwasser and Y. T. Kalai, On the impossibility of obfuscation with auxiliary input, in Proc. 46th Annual IEEE Symp. Foundations of Computer Science (IEEE Computer Society, 2005), pp. 553–562. Google Scholar
11. D. Dunaev and L. Lengyel, Overview of an obfuscation algorithm, in Proc. Int. Conf. Computer Science and Information Technologies, 2012, pp. 36–38. Google Scholar
12. D. Dunaev and L. Lengyel, A method of machine code translation to intermediate representation, in Proc. 4th IEEE Int. Conf. Cognitive Infococommunications, 2013, pp. 785–790. Google Scholar
13. D. Grune, K. G. Langendoen, C. J. Jacobs and H. E. Bal, Modern compiler design, in Worldwide Series in Computer Science (J. Wiley and Sons, 2001). Google Scholar
14. A. H. Watson and Th. J. McCabe, Structured testing: A testing methodology using the cyclomatic complexity metric, NIST Special Publication (1996) 235–500. Google Scholar
15. M. H. Halstead, Elements of Software Science (North-Holland, 1977). Google Scholar
16. R. E. Al Qutaish and A. Abran, An analysis of the design and definitions of Halstead’s metrics, in Proc. 15th Int. Workshop on Software Measurement, 2005, pp. 337–352. Google Scholar
17. J. L. Elshoff, An analysis of some commercial PL/1 programs, IEEE Transactions on Software Engineering, 1976. Google Scholar
18. E. I. Oviedo, Control flow, data flow and program complexity, in Proc. IEEE Annual Int. Comput. Software & Applications Conference, 1980, pp. 146–152. Google Scholar
19. C. L. McClure, A model for program complexity analysis, in Proc. 3rd Int. Conf. Software Engineering, 1978, pp. 149–157. Google Scholar
20. N. Chapin, A Measure of software complexity, in Proc. National Computer Conference, 1979, pp. 995–1002. Google Scholar
21. C. Collberg, C. Thomborson and D. Low, A taxonomy of obfuscating transformations, Technical report 148, Department of Computer Science, University of Auckland, 1997. Google Scholar
22. D. Dunaev and L. Lengyel, Complexity of a special deobfuscation problem, in 19th Annual IEEE Int. Conf. Workshops on the Engineering of Computer Based Systems, 2012, pp. 1–4. Google Scholar