Toward protecting control flow confidentiality in cloud-based computation

Computers and Security

Volumn 52, Issue , 2015, Pages 106-127

  Wang, Yongzhi ^a,b   Wei, Jinpeng ^b  

^a XIDIAN UNIVERSITY   (China)

^b FLORIDA INTERNATIONAL UNIVERSITY   (United States)

Author keywords

Cloud computing; Confidentiality; Program analysis; Program obfuscation; Security

Indexed keywords

CLOUD COMPUTING; INVESTMENTS; MAINTENANCE; REVERSE ENGINEERING;

COMPUTATION SERVICE; CONFIDENTIALITY; INFRASTRUCTURE INVESTMENT; OUTSOURCED PROJECTS; PROGRAM ANALYSIS; PROGRAM OBFUSCATION; SECURITY; STATIC AND DYNAMIC ANALYSIS;

DISTRIBUTED COMPUTER SYSTEMS;

EID: 84929302814     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2015.04.005     Document Type: Article

References (40)

1. AWS Case Study: Euclid, http://aws.amazon.com/solutions/case-studies/euclid/, [accessed 04.01.15].
2. AWS Case Study: Nearmap, http://aws.amazon.com/solutions/case-studies/nearmap/, [accessed 04.01.15].
3. AWS Case Study: Bioproximity, http://aws.amazon.com/solutions/case-studies/bioproximity/, [accessed 04.01.15].
4. AWS marketplace: Cloudinary - Image Management in the Cloud, https://aws.amazon.com/marketplace/pp/B00DQC6HWE?sr=0-2, [accessed 04.01.15].
5. Boaz Barak, Oded Goldreich, Russell Impagliazzo, Steven Rudich, Amit Sahai, and Salil Vadhan, et al. On the (im)possibility of obfuscating programs J ACM 59 2 May 2012 Article 6
6. Bioproximity, http://www.bioproximity.com, [accessed 04.01. 15].
7. John Canny A computational approach to edge detection IEEE Trans Pattern Analysis Mach Intell PAMI-8 6 Nov. 1986 679 698 IEEE
8. Bogdan Carbunar, and Radu Sion Toward private joins on outsourced data IEEE Trans Knowl Data Eng 24 9 2012 1699 1710 IEEE
9. Hoi Chang, and Atallah Mikhail Protecting software code by guards Secur Priv Digital Rights Manag 2002 160 175 Springer Berlin Heidelberg
10. Cloudinary, http://cloudinary.com/features#image-manipulation, [accessed 04.01.15].
11. Christian Collberg, and Clark Thomborson Watermarking, tamper-proofing, and obfuscation - tools for software protection IEEE Trans Softw Eng 28 8 Aug 2002 735 746 IEEE
12. Christian Collberg, Clark Thomborson, and Douglas Low Manufacturing cheap, resilient, and stealthy opaque constructs Proceedings of 1998 ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL1998) 1998 ACM
13. Christian Collberg, Clark Thomborson, and Douglas Low A taxonomy of obfuscating transformations Technical Report 148 July 1997 Department of Computer Science, University of Auckland New Zealand
14. Stephen Drape, Anirban Majumdar, and Clark Thomborson Slicing aided design of obfuscating transforms Proceedings of the 6th IEEE/ACIS international conference on Computer and Information Science (ICIS 2007) 11-13 July 2007 IEEE 1019 1024
15. Levent Ertaul, and Suma Venkatesh Novel obfuscation algorithms for software security Proceedings of the 2005 international conference on Software Engineering Research and Practice (SERP 2005) vol. 5 2005 209 215
16. Euclid, http://euclidanalytics.com, [accessed 04.01.15].
17. Free ebooks - Project Gutenberg, http://www.gutenberg.org, [accessed 04.01.15].
18. Sanjam Garg, Craig Gentry, Shai Halevi, Mariana Roykova, Amit Sahai, and Brent Waters Candidate indistinguishability obfuscation and functional encryption for all circuits Proceedings of 2013 IEEE 54th annual symposium on Foundations of Computer Science (FOCS 2014) 2013 IEEE 40 49
19. Tingjian Ge, and Stan Zdonik Answering aggregation queries in a secure system model Proceedings of the 33rd international conference on Very Large Databases (VLDB 2007) 2007 VLDB Endowment 519 530
20. Jun Ge, Soma Chaudhuri, and Akhilesh Tyagi Control flow based obfuscation Proceedings of the 5th ACM workshop on Digital Rights Management 2005 ACM 83 92
21. Hakan Hacigumus, Bala Iyer, Chen Li, and Sharad Mehrotra Executing SQL over encrypted data in the database-service-provider model Proceedings of the ACM SIGMOD international conference on Management of Data 2002 ACM Press 216 227
22. Hadoop4Images, https://github.com/Aishraj/Hadoop4Images/blob/master/Hadoop4Images/src/canny/CannyEdgeDetector.java, [accessed 04.01.15].
23. Anirban Majumdar, and Clark Thomborson Manufacturing opaque predicates in distributed systems for code obfuscation Proceedings of the 29th Australasian Computer Science Conference (ACSC 2006) 2006 Australian Computer Society Inc 187 196
24. Anirban Mandal, Yufeng Xin, Ilia Baldine, Paul Ruth, Chris Heerman, and Jeff Chase, et al. Provisioning and evaluating multi-domain networked clouds for Hadoop-based applications Proceedings of 2011 IEEE Third International Conference on Cloud Computing Technology and Science (CloudCom 2011) 2011 IEEE 690 697
25. Nearmap, http://us.nearmap.com, [accessed 04.01.15].
26. Jens Palsberg, Sowmya Krishnaswamy, Minseok Kwon, Di Ma, Qiuyun Shao, and Yi Zhang Experience with software watermarking Proceedings of 16th IEEE Annual Computer Security Applications Conference (ACSAC 2000) 2000 IEEE 308 316
27. Indrajit Roy, Srinath T.V. Setty, Ann Kilzer, Vitaly Shmatikov, and Emmett Witchel Airavat: security and privacy for mapreduce Proceedings of the 7th Usenix Symposium on Networked Systems Design and Implementation (NSDI 2010) 2010 USENIX Association 297 312
28. Sebastian Schrittwieser, and Stefan Katzenbeisser Code obfuscation against static and dynamic reverse engineering Proceedings of the 13th international conference on Information Hiding LNCS vol. 6958 2011 270 284
29. Edward J. Schwartz, Thanassis Avgerinos, and David Brumley All you ever wanted to know about dynamic taint analysis and forward symbolic execution (but might have been afraid to ask) Proceedings of 2010 IEEE symposium on Security and Privacy (S&P 2010) 2010 IEEE 317 331
30. Monirul Sharif, Andrea Lanzi, Jonathon Giffin, and Wenke Lee Impeding malware analysis using conditional code obfuscation Proceedings of the 15th annual network and Distributed System Security Symposium 2008 NDSS
31. Symja, a Java computer algbra system. https://code.google.com/p/symja/.
32. Sharath K. Udupa, Saumya K. Debray, and Matias Madou Deobfuscation: reverse engineering obfuscated code Proceedings of the 12th Working Conference on Reverse Engineering (WCRE 2005) 2005 IEEE
33. Raja Vallée-Rai, Phong Co, Etienne Gagnon, Laurie Hendren, Patrick Lam, and Vijay Sundaresan Soot-a Java Optimization Framework Proceedings of the 1999 conference of the Centre for Advanced Studies on Collaborative research (CASCON 1999) 1999 IBM Press
34. Chenxi Wang, Jack Davidson, Jonathan Hill, and John Knight Protection of software-based survivability mechanisms Proceedings of the 2001 conference on Dependable Systems and Networks (DSN 2001) 2001 IEEE 193 202
35. Zhi Wang, Jiang Ming, Chunfu Jia, and Debin Gao Linear obfuscation to combat symbolic execution Proceedings of the 16th European Symposium on Research in Computer Security (ESORICS 2011) 2011 Springer Berlin Heidelberg 210 226
36. Yongzhi Wang, Jinpeng Wei, and Mudhakar Srivatsa Result integrity check for MapReduce computation on hybrid clouds Proceedings of the 6th IEEE international conference on Cloud Computing (IEEE CLOUD 2013) 2013 IEEE 847 854
37. Yongzhi Wang, Jinpeng Wei, and Mudhakar Srivatsa Cross Cloud MapReduce: a result integrity check framework on hybrid clouds Int J Cloud Comput (IJCC) 1 1 2013 26 39
38. Shuo Yang, Ali R. Butt, Y. Charlie Hu, and Samuel P. Midkiff Lightweight monitoring of the progress of remotely executing computations Languages and Compilers for Parallel Computing 2006 Springer Berlin Heidelberg 319 333
39. Kehuan Zhang, Xiaoyong Zhou, Yangyi Chen, XiaoFeng Wang, and Yaoping Ruan Sedic: privacy-aware data intensive computing on hybrid clouds Proceedings of the 18th ACM conference on Computer and Communications Security (CCS 2011) 2011 ACM 515 526
40. Djemel Ziou, and Salvatore Tabbone Edge detection techniques: an overview Pattern Recognit And Image Analysis 8 4 1998 537 559