论文标题

控制流扁平保留了恒定的策略(扩展版本)

Control-flow Flattening Preserves the Constant-Time Policy (Extended Version)

论文作者

Busi, Matteo, Degano, Pierpaolo, Galletta, Letterio

论文摘要

混淆编译器通过掩盖其含义并阻碍其原始源代码的重建来保护软件。定义此类编译器时的典型问题是它们对反向工程的鲁棒性和生产代码的性能。在研究程序的安全性能是否保留在混淆下,几乎没有做出的工作。在本文中,我们开始解决这个问题:我们认为控制流扁平,一种流行的混淆技术,用于工业编译器中,以及特定的安全策略,即恒定时间。我们证明,这种混淆保留了该政策,即,满足该政策的每个计划在转型之后仍在执行。

Obfuscating compilers protect a software by obscuring its meaning and impeding the reconstruction of its original source code. The typical concern when defining such compilers is their robustness against reverse engineering and the performance of the produced code. Little work has been done in studying whether the security properties of a program are preserved under obfuscation. In this paper we start addressing this problem: we consider control-flow flattening, a popular obfuscation technique used in industrial compilers, and a specific security policy, namely constant-time. We prove that this obfuscation preserves the policy, i.e., that every program satisfying the policy still does after the transformation.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源