Towards experimental evaluation of code obfuscation techniques

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2008, Pages 39-45

  Ceccato, Mariano ^a   Di Penta, Massimiliano ^d   Nagra, Jasvir ^e   Falcarin, Paolo ^c   Ricca, Filippo ^b   Torchiano, Marco ^c   Tonella, Paolo ^a  

^a ITC IRST   (Italy)

^b Unit CINI at DISI   (Italy)

^c POLITECNICO DI TORINO   (Italy)

^d UNIVERSITY OF SANNIO   (Italy)

^e UNIVERSITY OF TRENTO   (Italy)

Author keywords

Empirical studies; Software obfuscation

Indexed keywords

CODES (SYMBOLS); REVERSE ENGINEERING;

CODE COMPREHENSION; CODE OBFUSCATION; CONTROLLED EXPERIMENT; EMPIRICAL STUDIES; EXPERIMENTAL EVALUATION; HUMAN SUBJECTS; SHORT PERIODS; SOFTWARE OBFUSCATION;

STATIC ANALYSIS;

EID: 70349263325     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1456362.1456371     Document Type: Conference Paper

References (16)

1. B. Anckaert, M. Madou, B. D. Sutter, B. D. Bus, K. D. Bosschere, and B. Preneel. Program obfuscation: a quantitative approach. In QoP '07: Proceedings of the 2007 ACM workshop on Quality of protection, pages 15-20, New York, NY, USA, 2007. ACM.
2. B. Barak, O. Goldreich, R. Impagliazzo, S. Rudich, A. Sahai, S. Vadhan, and K. Yang. On the (im) possibility of obfuscating programs. Lecture Notes in Computer Science, 2139:19-23, 2001.
3. V. Basili, G. Caldiera, and D. H. Rombach. The Goal Question Metric Paradigm, Encyclopedia of Software Engineering. John Wiley and Sons, 1994.
4. C. Collberg, C. Thomborson, and D. Low. A taxonomy of obduscating transformations. Technical Report 148, Dept. of Computer Science, The Univ. of Auckland, 1997.
5. C. Collberg, C. Thomborson, and D. Low. Manufacturing cheap, resilient, and stealthy opaque constructs. In POPL '98: Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 184-196, New York, NY, USA, 1998. ACM.
6. P. Dalgaard. Introductory Statistics with R. Springer, 2002.
7. J. L. Devore. Probability and Statistics for Engineering and the Sciences. Duxbury Press; 7 edition, 2007.
8. H. Goto, M. Mambo, K. Matsumura, and H. Shizuya. An approach to the objective and quantitative evaluation of tamper-resistant software. In Third International Workshop on Information Security (ISW2000), pages 82-96. Springer, 2000.
9. K. Heffner and C. Collberg. The obfuscation executive. In Proceedings of the 7th International Conference on Information Security, ISC'04, volume 3255 of LNCS, pages 428-440, 2004.
10. A. N. Oppenheim. Questionnaire Design, Interviewing and Attitude Measurement. Pinter, London, 1992.
11. S. L. Pfleeger. Experimental design and analysis in software engineering. SIGSOFT NOTES, Parts 1 to 5, 1994 and 1995.
12. D. Sheskin. Handbook of Parametric and Nonparametric Statistical Procedures (fourth edition). Chapman & All, 2007.
13. I. Sutherland, G. E. Kalb, A. Blyth, and G. Mulley. An empirical examination of the reverse engineering process for binary files. Computers & Security, 25(3):221-228, 2006.
14. P. Tyma. Method for renaming identifiers of a computer program. US patent 6,102,966, 2000.
15. S. Udupa, S. Debray, and M. Madou. Deobfuscation: reverse engineering obfuscated code. Reverse Engineering, 12th Working Conference on, Nov. 2005.
16. C. Wohlin, P. Runeson, M. Höst, M. Ohlsson, B. Regnell, and A. Wesslén. Experimentation in Software Engineering - An Introduction. Kluwer Academic Publishers, 2000.