Enhanced method based on virtual registers rotation

Sematic attacks based on the data flow analysis bring big challenges to the code obfuscation.Concerning the data flow of virtual machine based (VM-based) code protection,the method transfers the mapping relation between the virtual registers and the op-code of the bytecode during executing,which mea...

Full description

Saved in:
Bibliographic Details
Main Authors: Yan PAN, Wei LIN
Format: Article
Language:English
Published: POSTS&TELECOM PRESS Co., LTD 2018-05-01
Series:网络与信息安全学报
Subjects:
Online Access:http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2018038
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1841530164021821440
author Yan PAN
Wei LIN
author_facet Yan PAN
Wei LIN
author_sort Yan PAN
collection DOAJ
description Sematic attacks based on the data flow analysis bring big challenges to the code obfuscation.Concerning the data flow of virtual machine based (VM-based) code protection,the method transfers the mapping relation between the virtual registers and the op-code of the bytecode during executing,which means the uncertainty and complexity of the data flow during interpretive execution of the bytecode.In addition,three policies are proposed to address the problem that how to choose the length of rotation for each bytecode,which grows complexity of the protection.Finally,a prototype of VRR-VM (virtual machine protection system based on virtual registers rotation) was implemented.Experiment results show that the method is effective and applicable for anti-reversing.
format Article
id doaj-art-b899a6891821491a92f064c70584de33
institution Kabale University
issn 2096-109X
language English
publishDate 2018-05-01
publisher POSTS&TELECOM PRESS Co., LTD
record_format Article
series 网络与信息安全学报
spelling doaj-art-b899a6891821491a92f064c70584de332025-01-15T03:12:48ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2018-05-014475459553335Enhanced method based on virtual registers rotationYan PANWei LINSematic attacks based on the data flow analysis bring big challenges to the code obfuscation.Concerning the data flow of virtual machine based (VM-based) code protection,the method transfers the mapping relation between the virtual registers and the op-code of the bytecode during executing,which means the uncertainty and complexity of the data flow during interpretive execution of the bytecode.In addition,three policies are proposed to address the problem that how to choose the length of rotation for each bytecode,which grows complexity of the protection.Finally,a prototype of VRR-VM (virtual machine protection system based on virtual registers rotation) was implemented.Experiment results show that the method is effective and applicable for anti-reversing.http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2018038VM-based code protectionvirtual registers rotationdata flow analysissematic attacks
spellingShingle Yan PAN
Wei LIN
Enhanced method based on virtual registers rotation
网络与信息安全学报
VM-based code protection
virtual registers rotation
data flow analysis
sematic attacks
title Enhanced method based on virtual registers rotation
title_full Enhanced method based on virtual registers rotation
title_fullStr Enhanced method based on virtual registers rotation
title_full_unstemmed Enhanced method based on virtual registers rotation
title_short Enhanced method based on virtual registers rotation
title_sort enhanced method based on virtual registers rotation
topic VM-based code protection
virtual registers rotation
data flow analysis
sematic attacks
url http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2018038
work_keys_str_mv AT yanpan enhancedmethodbasedonvirtualregistersrotation
AT weilin enhancedmethodbasedonvirtualregistersrotation