祝跃飞
信息工程大学 郑州 450002
基金项目:国家重点研发计划(2016YFB0801601, 2016YFB0801505)
详细信息
作者简介:耿普：男，1982年生，博士生，研究方向为信息安全
祝跃飞：男，1962年生，教授、博士生导师，研究方向为网络空间安全
通讯作者:耿普 23015636@qq.com
中图分类号:TP311计量
文章访问数:660
HTML全文浏览量:348
PDF下载量:35
被引次数:0
出版历程
收稿日期:2019-09-27
修回日期:2020-05-23
网络出版日期:2020-07-09
刊出日期:2020-12-08
An Branch Obfuscation Research on Path Branch Which Formed by Floating-point Comparison
Pu GENG,,Yuefei ZHU
Information Engineering University, Zhengzhou 450002, China
Funds:The National Key R&D Program of China (2016YFB0801601, 2016YFB0801505)
摘要
摘要:针对当前分支混淆方法仅对整数比较分支有效的缺陷，该文分析浮点数二进制表示与大小比较的关系，证明了浮点数二进制区间的前缀集合与浮点数区间内数据之间具有前缀匹配关系。使用哈希函数对前缀集合进行保护，利用哈希函数的单向性实现对抗符号执行，通过哈希值比对替换浮点数比较，提出一种基于前缀哈希值比较的分支条件混淆技术，实现了一种在符号执行对抗和混淆还原对抗上具有较强对抗性的混淆方法。最后，通过实验证和分析，证实了该文提出的混淆方法有消耗小、能够有效对抗符号执行和混淆还原的优点，具备较好的实用性。
关键词:分支混淆/
浮点数比较/
前缀算法/
符号执行
Abstract:For the faultiness that the recent branch obfuscation method is only efficient on branch condition formed by integer comparison. The relations between the binary representation and big or small comparison of floats are analyzed. The idea that the floats in float interval has prefix matching relation with the prefix set which comes from the binary representation interval of the floats is proved. By protecting the prefix set with Hash function, and based on the comparison of prefix-Hash, a new branch obfuscation method which works well on the branch formed by float number comparison is proposed. The new obfuscation method is powerful on symbolic execution combating and obfuscation recovery combating. At last, the obfuscation proposed in this paper is confirmed to be practical, and is useful to be against symbolic execution and obfuscation recovery.
Key words:Branch obfuscation/
Float number comparison/
Prefix algorithm/
Symbolic execution
PDF全文下载地址:
https://jeit.ac.cn/article/exportPdf?id=0f90e678-b580-4ce7-9b57-89c32ec6456d
