Protecting Software Code By Guards seas保护软件代码的守卫海洋.gwu.pptVIP

Protecting Software Code By Guards The George Washington University Cs297 YU-HAO HU Motives Software cracking is a serious threat to manyin the software industry. Attackers can insert an unconditional jump to overpass the serial number checker. How to protect important segment of code has became an issue. The Guarding Framework: Types of guard Guard: a piece of code responsible for performing certain security-related actions during program execution. Checksum code: Checksum another piece of program code at runtime and verify its integrity Repair code: Restore a piece of damaged code to its original form before it is executed or used. The Guarding Framework: Guard Graph The Guarding Framework: Features Distributed-ness Multiplicity Dynamism Scalability The Guarding Framework: System Guard template Binary manipulation Logical boundary between the data and executable code should be blurred. Obfuscate guard code The Guarding Framework: Template Example Conclusion Distributed protection Various protection schemes Configurable tamper-resistance Reference Protecting Software Codes By GuardsHoi Chang, Mikhail J. AtallahCenter for Education and Research inInformation Assurance and Security Arxan Technologies PC Assembly Language (NASM)Paul A. Carter Software Watermarking: Models and Dynamic Embeddings The George Washington University CS297YU-HAO HU Types of Attacks to Watermarking System Subtractive attack: attackers can crop out watermarks. Distortive attack: attackers can twist watermarks. Additive attack: attackers can override watermarks. Fingerprinting System Similar to watermarking system except it gives different secret messages to different receivers. Vulnerable to collusive attack. Attackers can locate the secret messages by comparing different copies of messages. Types of Watermarks: Static Watermarks Data Watermark Ex. string C = “Copyright…”. Code Watermark Ex. Additional data stored in an object or wherever in the code. Easy to be destroyed b