References & Citations
Computer Science > Cryptography and Security
Title: CodeTrolley: Hardware-Assisted Control Flow Obfuscation
(Submitted on 3 Mar 2019 (v1), last revised 27 Aug 2019 (this version, v3))
Abstract: Many cybersecurity attacks rely on analyzing a binary executable to find exploitable sections of code. Code obfuscation is used to prevent attackers from reverse engineering these executables. In this work, we focus on control flow obfuscation - a technique that prevents attackers from statically determining which code segments are original, and which segments are added in to confuse attackers. We propose a RISC-V-based hardware-assisted deobfuscation technique that deobfuscates code at runtime based on a secret safely stored in hardware, along with an LLVM compiler extension for obfuscating binaries. Unlike conventional tools, our work does not rely on compiling hard-to-reverse-engineer code, but on securing a secret key. As such, it can be seen as a lightweight alternative to on-the-fly binary decryption.
Submission history
From: Michel Kinsy [view email][v1] Sun, 3 Mar 2019 06:21:24 GMT (460kb)
[v2] Sat, 9 Mar 2019 12:44:28 GMT (510kb,D)
[v3] Tue, 27 Aug 2019 03:18:42 GMT (370kb,D)
Link back to: arXiv, form interface, contact.