Code Renewability for Native Software Protection
Article
Abrath, B., Coppens, B., Van Den Broeck, J., Wyseur, B., Cabutto, A., Falcarin, P. and De Sutter, B. 2020. Code Renewability for Native Software Protection. ACM Transactions on Privacy and Security. 23 (Art. 20). https://doi.org/10.1145/3404891
Authors | Abrath, B., Coppens, B., Van Den Broeck, J., Wyseur, B., Cabutto, A., Falcarin, P. and De Sutter, B. |
---|---|
Abstract | Software protection aims at safeguarding assets embedded in software by preventing and delaying reverse engineering and tampering attacks. This paper presents an architecture and supporting tool flow to renew parts of native applications dynamically. Renewed and diversified code and data belonging to either the original application or to linked-in protections are delivered from a secure server to a client on demand. This results in frequent changes to the software components when they are under attack, thus making attacks harder. By supporting various forms of diversification and renewability, novel protection combinations become available, and existing combinations become stronger. The prototype implementation is evaluated on a number of industrial use cases. |
Keywords | Software reverse engineering; Digital rights management; online protection; diversification; man-at-the-end attacks; software updates; security and privacy |
Journal | ACM Transactions on Privacy and Security |
Journal citation | 23 (Art. 20) |
ISSN | 2471-2566 |
Year | 2020 |
Publisher | Association for Computing Machinery (ACM) |
Accepted author manuscript | License File Access Level Anyone |
Digital Object Identifier (DOI) | https://doi.org/10.1145/3404891 |
Publication dates | |
Online | 25 Aug 2020 |
Publication process dates | |
Accepted | 01 May 2020 |
Deposited | 30 Jun 2020 |
Funder | EU FP7 |
External resource | ASPIRE-FP7 / framework |
ASPIRE Renewability framework | |
ASPIRE-FP7 Project Demonstrations | |
Copyright holder | © 2020 Copyright held by the owner/author(s). |
Copyright information | This is the author's version of the work. It is posted here for your personal use. Not for redistribution. The definitive Version of Record is to be published in ACM Transactions on Privacy and Security, https://doi.org/10.1145/3404891. |
https://repository.uel.ac.uk/item/8827x
Download files
Accepted author manuscript
Falcarin-acm-tops-2020.pdf | ||
License: All rights reserved | ||
File access level: Anyone |
300
total views157
total downloads1
views this month1
downloads this month