Research on Java Software Protection with the Obfuscation in Identifier Renaming

Tang, Zhangyong; Liu, Chen; Fang, Dingyi; Chen, Feng

doi:10.1109/icicic.2009.312

Cited by 7 publications

(4 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In high-level diversification, identifier renaming is often a technique used to confuse the de-compiler so that it is no longer able to generate correct code out of the obfuscated code, or to make the produced code contain syntax errors or semantic errors [20]. In [18], the authors obfuscate the Java byte code through identifier renaming in order to protect the Java-based mobile agents.…”

Section: Related Workmentioning

confidence: 99%

“…Linger et al [11] propose the stochastic renaming of the data and labels (altering the names using the strings generated randomly) as a method of diversification. In [20] four different identifier renaming algorithms are presented to obfuscate the Java source code to generate hard-to-analyze scrambled Java byte code. In [5], identifier renaming is used to mitigate the risk of a successful attack, e.g., SQL injection, cross-site scripting (XSS), and buffer overflow.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Symbol diversification of linux binaries

Laurén

Mäki

Rauti

et al. 2014

World Congress on Internet Security (WorldCIS-2014)

View full text Add to dashboard Cite

In this paper, we advocate large-scale diversification as a method to protect operating systems and render malicious programs ineffective. The idea is to diversify all the indirect library entry points to the system calls on a specific computer. As a result, it becomes very difficult for a piece of malware to access resources. The diversification of indirect system call entry points in operating system libraries is unique for each computer.Therefore, a piece of malware no longer works on several computers and becomes incompatible with their environment.We also present a concrete diversification tool and results on successful diversification. We conclude that despite some challenges, our tool can successfully diversify symbols in binaries and associated libraries in order to protect the system from attacks. API diversification; symbol diversification; renaming; diversifier tool

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Symbol diversification of linux binaries

Laurén

Mäki

Rauti

et al. 2014

World Congress on Internet Security (WorldCIS-2014)

View full text Add to dashboard Cite

show abstract

“…This method entails modifying elements like whitespace, indentation, and comments, which are crucial for human readability but irrelevant to machine execution of the code. Scramble Identifiers [33,40], Change Formatting [41], and Remove Comments [41] techniques are types of layout obfuscation that eliminate existing information from the source code. Layout obfuscation, achieved by rearranging, adding, or removing non-executable components, renders source code a challenge to read and understand, particularly for individuals attempting to reverse engineer or maliciously analyze it.…”

Section: Source Code Obfuscationmentioning

confidence: 99%

A Framework to Quantify the Quality of Source Code Obfuscation

Jin,

Lee,

Yang

et al. 2024

Preprint

View full text Add to dashboard Cite

Malicious reverse engineering of software has served as a valuable technique that attackers can use to infringe upon and steal intellectual property. To protect against such attackers, we can employ obfuscation techniques as useful tools to safeguard software. Applying obfuscation techniques to source code can effectively prevent malicious attackers from reverse engineering a program. However, the ambiguity surrounding the protective efficacy of these source code obfuscation tools and techniques presents challenges for users in evaluating and comparing the varying degrees of protection provided. This paper attempts to address these issues and presents a methodology to quantify the effect of source code obfuscation. Our proposed method is based on three main types of data: (1) the control flow graph, (2) the program path, and (3) the performance overhead added to the process---all of which are derived from a program analysis conducted by human experts and automated tools. For the first time, we have implemented a tool that can quantitatively evaluate the quality of obfuscation techniques. Then, to validate the effectiveness of the implemented framework, we conducted experiments using four widely recognized commercial and open-source obfuscation tools. Our experimental findings, based on quantitative values related to obfuscation techniques, demonstrate that our proposed framework effectively assesses obfuscation quality.

show abstract

“…• Hiding [20] This technique emphasizes to hide features and change the layout. This is harder to understand but is not impossible to reverse.…”

Section: List Limitationmentioning

confidence: 99%

Hybrid Obfuscation of Encryption

Al-Hakimi¹,

Sultan²

2023

Coding Theory Essentials

View full text Add to dashboard Cite

Obfuscation is an encryption method. It allows the programmer to reform the code for protection. Obfuscation has promising chance to change the way of coding, where the programmer has the ability to program with any language, not necessarily English. Obfuscation, Unicode, and mathematical equations have the possibility to change strings and identifiers and to hide secret algorithms and business rules. Special dictionary is used for the string obfuscation to hide the logic of the program. The hybrid obfuscation technique will be implemented into a tool that automatically converts the code. It can be can be used for games and mobile applications for protection. With obfuscation, the application still has the ability to perform sufficiently and provide the desired output without any delays in performing timing. After obfuscating the source file, reverser still has the ability to break the object file but will not be able to read or understand and when obfuscation technique is complicated, reversing leads to error where original code disappears. In this chapter, hybrid obfuscation will be presented with examples, and obfuscation table is presented as well for future use.

show abstract

Research on Java Software Protection with the Obfuscation in Identifier Renaming

Cited by 7 publications

References 4 publications

Symbol diversification of linux binaries

Symbol diversification of linux binaries

A Framework to Quantify the Quality of Source Code Obfuscation

Hybrid Obfuscation of Encryption

Contact Info

Product

Resources

About