• TUCS Publication Series
• How to Publish in TUCS Series
• Publication Search
• Publication Graph
• Publication Input
• Publication Input Guide
• JuFo Browser

Wide Application Security by Low-Level Program Code Obfuscation

Ville Leppänen, Sampsa Rauti, Samuel Laurén, Wide Application Security by Low-Level Program Code Obfuscation. MATINE, Ministry of Defense, 2015.

Abstract:

The goal of our research project is to protect security of applications and software systems in a whole new way: by diversifying implementations of all the software layers and their interfaces on the binary level. The system call interface of the operating system is diversified uniquely for each system and all the entry points to this interface are diversified in applications and libraries accordingly. Moreover, the diversification in the library level is transitive. Malware that uses prior knowledge about existing interfaces in an operating system is now rendered useless because of diversification. All in all, our diversification based solution is a proactive solution against the prevailing operating system monoculture. The research project provided a proof-of-concept implementation for Linux. Our solution does not aim at removing the possible existence of security holes in Linux but rather making it infeasible to deliver effective malware through such security holes into the operating system environment.

BibTeX entry:

@BOOK{bLeRaLa15a,
  title = {Wide Application Security by Low-Level Program Code Obfuscation},
  author = {Leppänen, Ville and Rauti, Sampsa and Laurén, Samuel},
  publisher = {MATINE, Ministry of Defense},
  year = {2015},
  ISBN = {978-951-25-2635-2},
}

Belongs to TUCS Research Unit(s): Software Development Laboratory (SwDev)

Edit publication