Largely known for attack scenarios, code reuse techniques at a closer look reveal properties that are appealing also for program obfuscation. We explore the popular return-oriented programming paradigm under this light, transforming program functions into ROP chains that coexist seamlessly with the surrounding software stack. We show how to build chains that can withstand popular static and dynamic deobfuscation approaches, evaluating the robustness and overheads of the design over common programs. The results suggest a significant amount of computational resources would be required to carry a deobfuscation attack for secret finding and code coverage goals.
2021, 2021 51st Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN), Pages 555-568
Hiding in the Particles: When Return-Oriented Programming Meets Program Obfuscation (04b Atto di convegno in volume)
Borrello Pietro, Coppa Emilio, D'Elia Daniele Cono
Gruppo di ricerca: Cybersecurity