Skip to Main content Skip to Navigation
New interface
Conference papers

Data Tainting and Obfuscation: Improving Plausibility of Incorrect Taint

Sandrine Blazy 1 Stéphanie Riaud 1, 2 Thomas Sirvent 2 
1 CELTIQUE - Software certification with semantic analysis
Inria Rennes – Bretagne Atlantique , IRISA-D4 - LANGAGE ET GÉNIE LOGICIEL
Abstract : —Code obfuscation is designed to impede the reverse engineering of a binary software. Dynamic data tainting is an analysis technique used to identify dependencies between data in a software. Performing dynamic data tainting on obfuscated software usually yields hard to exploit results, due to over-tainted data. Such results are clearly identifiable as useless: an attacker will immediately discard them and opt for an alternative tool. In this paper, we present a code transformation technique meant to prevent the identification of useless results: a few lines of code are inserted in the obfuscated software, so that the results obtained by the dynamic data tainting approach appear acceptable. These results remain however wrong and lead an attacker to waste enough time and resources trying to analyze incorrect data dependencies, so that he will usually decide to use less automated and advanced analysis techniques, and maybe give up reverse engineering the current binary software. This improves the security of the software against malicious analysis.
Document type :
Conference papers
Complete list of metadata

Cited literature [36 references]  Display  Hide  Download
Contributor : Sandrine Blazy Connect in order to contact the contributor
Submitted on : Friday, September 4, 2015 - 5:05:48 PM
Last modification on : Thursday, January 20, 2022 - 5:33:22 PM
Long-term archiving on: : Saturday, December 5, 2015 - 1:55:19 PM


Files produced by the author(s)




  • HAL Id : hal-01193286, version 1


Sandrine Blazy, Stéphanie Riaud, Thomas Sirvent. Data Tainting and Obfuscation: Improving Plausibility of Incorrect Taint. Source Code Analysis and Manipulation (SCAM), Sep 2015, Bremen, Germany. ⟨hal-01193286⟩



Record views


Files downloads