Generation of efficient obfuscated code through just-in-time compilation

Muhammad Hataba, Ahmed El-Mahdy, Kazunori Ueda

Research output: Contribution to journalArticle

Abstract

Nowadays the computing technology is going through a major paradigm shift. Local processing platforms are being replaced by physically out of reach yet more powerful and scalable environments such as the cloud computing platforms. Previously, we introduced the OJIT system as a novel approach for obfuscating remotely executed programs, making them difficult for adversaries to reverse-engineer. The system exploited the JIT compilation technology to randomly and dynamically transform the code, making it constantly changing, thereby complicating the execution state. This work aims to propose the new design iOJIT, as an enhanced approach that patches the old systems shortcomings, and potentially provides more effective obfuscation. Here, we present an analytic study of the obfuscation techniques on the generated code and the cost of applying such transformations in terms of execution time and performance overhead. Based upon this profiling study, we implemented a new algorithm to choose which obfuscation techniques would be better chosen for “efficient” obfuscation according to our metrics, i.e., less prone to security attacks. Another goal was to study the system performance with different applications. Therefore, we applied our system on a cloud platform running different standard benchmarks from SPEC suite.

Original languageEnglish
Pages (from-to)645-649
Number of pages5
JournalIEICE Transactions on Information and Systems
VolumeE102D
Issue number3
DOIs
Publication statusPublished - 2019 Mar 1

Keywords

  • Cloud computing security
  • Dynamic compilation
  • Obfuscation
  • Optimization transformations
  • Side-channels

ASJC Scopus subject areas

  • Software
  • Hardware and Architecture
  • Computer Vision and Pattern Recognition
  • Electrical and Electronic Engineering
  • Artificial Intelligence

Fingerprint Dive into the research topics of 'Generation of efficient obfuscated code through just-in-time compilation'. Together they form a unique fingerprint.

  • Cite this