Enhanced method based on virtual registers rotation
Sematic attacks based on the data flow analysis bring big challenges to the code obfuscation.Concerning the data flow of virtual machine based (VM-based) code protection,the method transfers the mapping relation between the virtual registers and the op-code of the bytecode during executing,which mea...
Saved in:
Main Authors: | , |
---|---|
Format: | Article |
Language: | English |
Published: |
POSTS&TELECOM PRESS Co., LTD
2018-05-01
|
Series: | 网络与信息安全学报 |
Subjects: | |
Online Access: | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2018038 |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
_version_ | 1841530164021821440 |
---|---|
author | Yan PAN Wei LIN |
author_facet | Yan PAN Wei LIN |
author_sort | Yan PAN |
collection | DOAJ |
description | Sematic attacks based on the data flow analysis bring big challenges to the code obfuscation.Concerning the data flow of virtual machine based (VM-based) code protection,the method transfers the mapping relation between the virtual registers and the op-code of the bytecode during executing,which means the uncertainty and complexity of the data flow during interpretive execution of the bytecode.In addition,three policies are proposed to address the problem that how to choose the length of rotation for each bytecode,which grows complexity of the protection.Finally,a prototype of VRR-VM (virtual machine protection system based on virtual registers rotation) was implemented.Experiment results show that the method is effective and applicable for anti-reversing. |
format | Article |
id | doaj-art-b899a6891821491a92f064c70584de33 |
institution | Kabale University |
issn | 2096-109X |
language | English |
publishDate | 2018-05-01 |
publisher | POSTS&TELECOM PRESS Co., LTD |
record_format | Article |
series | 网络与信息安全学报 |
spelling | doaj-art-b899a6891821491a92f064c70584de332025-01-15T03:12:48ZengPOSTS&TELECOM PRESS Co., LTD网络与信息安全学报2096-109X2018-05-014475459553335Enhanced method based on virtual registers rotationYan PANWei LINSematic attacks based on the data flow analysis bring big challenges to the code obfuscation.Concerning the data flow of virtual machine based (VM-based) code protection,the method transfers the mapping relation between the virtual registers and the op-code of the bytecode during executing,which means the uncertainty and complexity of the data flow during interpretive execution of the bytecode.In addition,three policies are proposed to address the problem that how to choose the length of rotation for each bytecode,which grows complexity of the protection.Finally,a prototype of VRR-VM (virtual machine protection system based on virtual registers rotation) was implemented.Experiment results show that the method is effective and applicable for anti-reversing.http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2018038VM-based code protectionvirtual registers rotationdata flow analysissematic attacks |
spellingShingle | Yan PAN Wei LIN Enhanced method based on virtual registers rotation 网络与信息安全学报 VM-based code protection virtual registers rotation data flow analysis sematic attacks |
title | Enhanced method based on virtual registers rotation |
title_full | Enhanced method based on virtual registers rotation |
title_fullStr | Enhanced method based on virtual registers rotation |
title_full_unstemmed | Enhanced method based on virtual registers rotation |
title_short | Enhanced method based on virtual registers rotation |
title_sort | enhanced method based on virtual registers rotation |
topic | VM-based code protection virtual registers rotation data flow analysis sematic attacks |
url | http://www.cjnis.com.cn/thesisDetails#10.11959/j.issn.2096-109x.2018038 |
work_keys_str_mv | AT yanpan enhancedmethodbasedonvirtualregistersrotation AT weilin enhancedmethodbasedonvirtualregistersrotation |