论文标题
弹性的自我欺骗软件保护
Resilient Self-Debugging Software Protection
论文作者
论文摘要
调试者是一种流行的逆向工程和篡改工具。自我欺骗是一种用于捍卫自己免受敌对辩论者的应用程序的有效技术。但是，在对最先进的自我欺骗的渗透测试中，我们观察到了几个机会，可以通过这些机会进行攻击。因此，我们改进了现有技术，通过引入相互调试并使受保护的应用程序和自我挑战之间的控制转移更加隐秘，从而使其更有弹性。本文介绍了改进的自我欺骗设计，并详细介绍了我们在实现互惠调试方面的研究工作。在我们的评估中，我们表明，改进的设计对于攻击者而言很难击败。
Debuggers are a popular reverse engineering and tampering tool. Self-debugging is an effective technique for applications to defend themselves against hostile debuggers. In penetration tests on state-of-the-art self-debugging, we observed several opportunities through which it could be attacked, however. We therefore improved upon the existing technique, making it more resilient by introducing reciprocal debugging and making the transfers of control between protected application and self-debugger more stealthy. This paper presents the improved self-debugging design, and details our research efforts into realizing reciprocal debugging. In our evaluation we show that the improved design is significantly harder for attackers to defeat.
