论文标题
本机软件保护的代码更新性
Code Renewability for Native Software Protection
论文作者
论文摘要
软件保护旨在通过防止和延迟逆向工程和篡改攻击来保护软件中嵌入的资产。本文介绍了一个体系结构和支持工具流，以动态更新本机应用程序的一部分。恢复和多元化的代码和属于原始应用程序或链接的保护措施的数据将从安全服务器运送到客户端。这会导致软件组件受到攻击时的经常更改，从而使攻击更加困难。通过支持各种形式的多元化和可更新性，可以使用新颖的保护组合，现有组合变得更强大。在许多工业用例中评估了原型实施。
Software protection aims at safeguarding assets embedded in software by preventing and delaying reverse engineering and tampering attacks. This paper presents an architecture and supporting tool flow to renew parts of native applications dynamically. Renewed and diversified code and data belonging to either the original application or to linked-in protections are delivered from a secure server to a client on demand. This results in frequent changes to the software components when they are under attack, thus making attacks harder. By supporting various forms of diversification and renewability, novel protection combinations become available, and existing combinations become stronger. The prototype implementation is evaluated on a number of industrial use cases.
