Skip to Main content Skip to Navigation
Conference papers

Data Tainting and Obfuscation: Improving Plausibility of Incorrect Taint

Sandrine Blazy 1 Stéphanie Riaud 1, 2 Thomas Sirvent 2
1 CELTIQUE - Software certification with semantic analysis
Inria Rennes – Bretagne Atlantique , IRISA-D4 - LANGAGE ET GÉNIE LOGICIEL
Abstract : —Code obfuscation is designed to impede the reverse engineering of a binary software. Dynamic data tainting is an analysis technique used to identify dependencies between data in a software. Performing dynamic data tainting on obfuscated software usually yields hard to exploit results, due to over-tainted data. Such results are clearly identifiable as useless: an attacker will immediately discard them and opt for an alternative tool. In this paper, we present a code transformation technique meant to prevent the identification of useless results: a few lines of code are inserted in the obfuscated software, so that the results obtained by the dynamic data tainting approach appear acceptable. These results remain however wrong and lead an attacker to waste enough time and resources trying to analyze incorrect data dependencies, so that he will usually decide to use less automated and advanced analysis techniques, and maybe give up reverse engineering the current binary software. This improves the security of the software against malicious analysis.
Document type :
Conference papers
Complete list of metadatas

Cited literature [36 references]  Display  Hide  Download

https://hal.inria.fr/hal-01193286
Contributor : Sandrine Blazy <>
Submitted on : Friday, September 4, 2015 - 5:05:48 PM
Last modification on : Friday, July 10, 2020 - 4:00:21 PM
Long-term archiving on: : Saturday, December 5, 2015 - 1:55:19 PM

File

SCAM_v2.pdf
Files produced by the author(s)

Licence


Copyright

Identifiers

  • HAL Id : hal-01193286, version 1

Citation

Sandrine Blazy, Stéphanie Riaud, Thomas Sirvent. Data Tainting and Obfuscation: Improving Plausibility of Incorrect Taint. Source Code Analysis and Manipulation (SCAM), Sep 2015, Bremen, Germany. ⟨hal-01193286⟩

Share

Metrics

Record views

655

Files downloads

756