Schrittwieser, Sebastian ; Katzenbeisser, Stefan ; Merzdovnik, Georg ; Kieseberg, Peter ; Weippl, Edgar (2014):
AES-SEC: Improving software obfuscation through hardware-assistance (short paper).
In: ARES '14, In: Proceedings of the 2014 Ninth International Conference on Availability, Reliability and Security Pages, pp. 184-191,
IEEE Computer Society, Fribourg, Switzerland, ISBN 978-1-4799-4223-7,
DOI: 10.1109/ARES.2014.32,
[Conference or Workshop Item]

Abstract

While the resilience of software-only code obfuscation remains unclear and ultimately depends only on available resources and patience of the attacker, hardware-based software protection approaches can provide a much higher level of protection against program analysis. Almost no systematic research has been done on the interplay between hardware and software based protection mechanism. In this paper, we propose modifications to Intel's AES-NI instruction set in order to make it suitable for application in software protection scenarios and demonstrate its integration into a control flow obfuscation scheme. Our novel approach provides strong hardware-software binding and restricts the attack context to pure dynamic analysis - two major limiting factors of reverse engineering - to delay a successful attack against a program.

Send an inquiry

Show editorial Details