Title :
Code Obfuscation Using Pseudo-random Number Generators
Author :
Aycock, John ; Cárdenas, Juan Manuel Gutiérrez ; De Castro, Daniel Medeiros Nunes
Author_Institution :
Dept. of Comput. Sci., Univ. of Calgary, Calgary, AB, Canada
Abstract :
We describe a novel method for malicious code obfuscation that uses code already present in systems: a pseudo-randomnumber generator. This can also be seen as an anti-disassembly and anti-debugging technique, depending on deployment, because the actual code does not exist until run - it is generated dynamically by the pseudo-random number generator.A year´s worth of experiments are used to demonstrate thatthis technique is a viable code obfuscation option for a malicious adversary with access to large amounts of computing power.
Keywords :
program debugging; random number generation; reverse engineering; security of data; anti-debugging technique; anti-disassembly technique; malicious code obfuscation; pseudo-random number generator; reverse engineering; Computer science; Drives; Government; Invasive software; Military computing; Power engineering computing; Reverse engineering; Size measurement; Software measurement; Storms;
Conference_Titel :
Computational Science and Engineering, 2009. CSE '09. International Conference on
Conference_Location :
Vancouver, BC
Print_ISBN :
978-1-4244-5334-4
Electronic_ISBN :
978-0-7695-3823-5
DOI :
10.1109/CSE.2009.43