论文标题
隐藏在粒子中：当返回的编程符合程序时，
Hiding in the Particles: When Return-Oriented Programming Meets Program Obfuscation
论文作者
论文摘要
近距离外观的代码重用技术在很大程度上闻名，揭示了对程序混淆也有吸引力的属性。我们在此灯光下探索流行的面向返回的编程范式，将程序功能转换为ROP链，与周围的软件堆栈无缝共存。我们展示了如何建造可以承受流行的静态和动态的去量刺激方法的链条，从而评估了设计对普通程序的稳健性和间接费用。结果表明，需要大量的计算资源来进行秘密发现和代码覆盖目标的Deobfuscation攻击。
Largely known for attack scenarios, code reuse techniques at a closer look reveal properties that are appealing also for program obfuscation. We explore the popular return-oriented programming paradigm under this light, transforming program functions into ROP chains that coexist seamlessly with the surrounding software stack. We show how to build chains that can withstand popular static and dynamic deobfuscation approaches, evaluating the robustness and overheads of the design over common programs. The results suggest a significant amount of computational resources would be required to carry a deobfuscation attack for secret finding and code coverage goals.
