Steal this movie - Automatically bypassing DRM protection in streaming media services

Proceedings of the 22nd USENIX Security Symposium

Volumn , Issue , 2013, Pages 687-702

  Wang, Ruoyu ^a,b   Shoshitaishvili, Yan ^a   Kruegel, Christopher ^a   Vigna, Giovanni ^a  

^a UNIVERSITY OF CALIFORNIA   (United States)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

MEDIA STREAMING; MOTION PICTURES; VIDEO ON DEMAND;

DIGITAL RIGHTS MANAGEMENT SYSTEM; ECONOMIC MODELING; HARDWARE PLATFORM; MEMORY-BASED APPROACH; STREAMING MEDIA SERVICES; STREAMING SERVICE; VIDEO ENTERTAINMENT; VIDEO ON DEMAND SERVICES;

COPYRIGHTS;

EID: 84967246245     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (50)

1. RC4, 1994. http://web.archive.org/web/20080404222417/http://cypherpunks.venona.com/date/1994/09/msg00304.html.
2. RTMP, 2009. http://wwwimages.adobe.com/www.adobe.com/content/dam/Adobe/en/devnet/rtmp/pdf/rtmp_specification_1.0.pdf.
3. Adobe RTMPE, 2012. http://lkcl.net/rtmp/RTMPE.txt.
4. Audials software, 2012. http://audials.com/en/how_to_record_stream_capture_music_videos_movies_from/netflix.html.
5. The despotify project, 2012. http://despotify.se/.
6. E-city nabs pirates using thomson watermarking tech, 2012. http://businessofcinema.com/bollywood-news/ecity-nabs\%2Dpirates-using-thomson\%2Dwatermarking\%2Dtech/27167.
7. Esperanza project, 2012. http://code.google.com/p/esperanza.
8. Freakonomics - How Much Do Music And Movie Piracy Really Hurt the U.S. Economy?, 2012. http://www.freakonomics.com/2012/01/12/how-much\%2Ddo-music\%2Dand-movie\%2Dpiracy\%2Dreally-hurt\%2Dthe-u-s\%2Deconomy/.
9. High-bandwidth Digital Content Protection System - Interface Independent Adaptation - 2.2, 2012. http://www.digital-cp.com/files/static_page_files/6FEA6756-1A4B\%2DB294\%2DD0494084C37A637F/HDCP\%20Interface\%20Independent\%20Adaptation\%20Specification\%20Rev2_2_FINAL.pdf.
10. Microsoft PlayReady DRM, 2012. http://msdn.microsoft.com/en-us/library/cc838192(VS.95).aspx.
11. Microsoft protected media path, 2012. http://scholar.google.com/scholar?hl=en&q=protected+media+path&btnG=&as_sdt=1%2C5&as_sdtp=.
12. Nation of unrepentant pirates costs $900m, 2012. http://www.smh.com.au/technology/technology-news/nation-of\%2Dunrepentant-pirates-costs\%2D900m-20110305\%2D1bix5.html.
13. Porn studio awarded 1.5 million from man who shared 10 movies, 2012. http://www.slate.com/blogs/trending/2012/11/02/kywan_fisher_flava_works_wins_1_5_million_in_biggest_ever_torrent_judgement.html.
14. SOPA: How much does online piracy really cost the economy?, 2012. http://www.washingtonpost.com/blogs/ezra-klein/post/how-much\%2Ddoes-online-piracy\%2Dreally-cost-the\%2Deconomy/2012/01/05/gIQAXknNdP_blog.html.
15. Spotify DRM, 2012. http://www.defectivebydesign.org/spotify.
16. F. Bellard. QEMU, a fast and portable dynamic translator. USENIX, 2005.
17. J. Bloom and C. Polyzois. Watermarking to track motion picture theft. In Signals, Systems and Computers, 2004. Conference Record of the Thirty-Eighth Asilomar Conference on, Volume 1, pages 363-367. IEEE, 2004.
18. L. Boney, A. Tewfik, and K. Hamdy. Digital watermarks for audio signals. In Multimedia Computing and Systems, 1996., Proceedings of the Third IEEE International Conference on, pages 473-480. IEEE, 1996.
19. J. Caballero, N. M. Johnson, S. McCamant, and D. Song. Binary code extraction and interface identification for security applications. Technical report, DTIC Document, 2009.
20. J. Caballero, P. Poosankam, C. Kreibich, and D. Song. Dispatcher: Enabling active botnet infiltration using automatic protocol reverseengineering. In Proceedings of the 16th ACM conference on Computer and communications security, pages 621-634. ACM, 2009.
21. J. Caballero, P. Poosankam, S. McCamant, D. Song, et al. Input generation via decomposition and re-stitching: Finding bugs in malware. In Proceedings of the 17th ACM conference on Computer and communications security, pages 413-425. ACM, 2010.
22. J. Calvet, J. M. Fernandez, and J.-Y. Marion. Aligot: Cryptographic function identification in obfuscated binary programs. 2012.
23. R. Caso. Digital Rights Management: Il commercio delle informazioni digitali tra contratto e diritto d'autore. CEDAM, 2006.
24. S. Chow, P. Eisen, H. Johnson, and P. C. Van Oorschot. A white-box des implementation for drm applications. In Digital Rights Management, pages 1-15. Springer, 2003.
25. U. S. Congress. Digital Millennium Copyright Act, October 1998.
26. I. Cox and J. Linnartz. Some general methods for tampering with watermarks. Selected Areas in Communications, IEEE Journal on, 16(4):587-593, 1998.
27. G. Danby. Key issues for the new parliament 2010 - copyright and piracy, 2010. http://www.parliament.uk/documents/commons/lib/research/key_issues/Key%20Issues%20Copyright%20and%20piracy.pdf.
28. E. Diehl and T. Furon. © watermark: Closing the analog hole. In Consumer Electronics, 2003. ICCE. 2003 IEEE International Conference on, pages 52-53. IEEE, 2003.
29. W. Diffie and M. Hellman. New directions in cryptography. Information Theory, IEEE Transactions on, 22(6):644-654, 1976.
30. Engadget. HDCP 'master key' supposedly released, unlocks HDTV copy protection permanently, 2010. http://www.engadget.com/2010/09/14/hdcp-master\%2Dkey-supposedly\%2Dreleased-unlocks\%2Dhdtv-copy\%2Dprotect/.
31. O. Goldreich. Foundations of Cryptography: Volume 2, Basic Applications, Volume 2. Cambridge university press, 2004.
32. F. Gröbert, C. Willems, and T. Holz. Automated identification of cryptographic primitives in binary programs. In Recent Advances in Intrusion Detection, pages 41-60. Springer, 2011.
33. D. Knuth. The art of computer programming. addison-Wesley, 2006.
34. C. Kolbitsch, T. Holz, C. Kruegel, and E. Kirda. Inspector gadget: Automated extraction of proprietary gadgets from malware binaries. In Security and Privacy (SP), 2010 IEEE Symposium on, pages 29-44. IEEE, 2010.
35. G. Langelaar, R. Lagendijk, and J. Biemond. Removing spatial spread spectrum watermarks. In Proceedings of the European Signal Processing Conference (EUSIPCO98), Rodes, Greece, 1998.
36. P. L'Ecuyer. Testing random number generators. In Winter Simulation Conference: Proceedings of the 24 th conference on Winter simulation, Volume 13, pages 305-313, 1992.
37. Z. Lin, X. Zhang, and D. Xu. Automatic reverse engineering of data structures from binary execution. 2010.
38. C. Luk, R. Cohn, R. Muth, H. Patil, A. Klauser, G. Lowney, S. Wallace, V. Reddi, and K. Hazelwood. Pin: building customized program analysis tools with dynamic instrumentation. In ACM SIGPLAN Notices, Volume 40, pages 190-200. ACM, 2005.
39. N. Lutz. Towards revealing attackers intent by automatically decrypting network traffic. Master's thesis, ETH Zuerich, 2008.
40. T. Moseley, D. Grunwald, D. Connors, R. Ramanujam, V. Tovinkere, and R. Peri. LoopProf: Dynamic techniques for loop detection and profiling. In Proceedings of the 2006 Workshop on Binary Instrumentation and Applications (WBIA), 2006.
41. M. Peitz and P. Waelbroeck. Piracy of digital products: A critical review of the economics literature. 2003.
42. C. Shannon. Communication theory of secrecy systems. Bell system technical journal, 28(4):656-715, 1949.
43. A. Slowinska, T. Stancescu, and H. Bos. Howard: a dynamic excavator for reverse engineering data structures. In Proceedings of NDSS, 2011.
44. F. A. Stevenson. Cryptanalysis of contents scrambling system, 2000. http://web.archive.org/web/20000302000206/www.dvd-copy.com/news/cryptanalysis_of_contents_scrambling_system.htm.
45. S. Thakkur and T. Huff. Internet streaming SIMD extensions. Computer, 32(12):26-34, 1999.
46. Z. Wang, X. Jiang, W. Cui, X. Wang, and M. Grace. Reformat: Automatic reverse engineering of encrypted messages. Computer Security-ESORICS 2009, pages 200-215, 2009.
47. Wikipedia. Analog Hole - Wikipedia, the free encyclopedia, 2012. [Online; accessed 09-Nov-2012].
48. Wikipedia. DeCSS - Wikipedia, the free encyclopedia, 2012. [Online; accessed 09-Nov-2012].
49. Wikipedia. Software protection dongle - Wikipedia, the free encyclopedia, 2012. [Online; accessed 09-Nov-2012].
50. Y. Zhu, J. Jung, D. Song, T. Kohno, and D. Wetherall. Privacy scope: A precise information flow tracking system for finding application leaks. Technical report, Tech. Rep. EECS-2009-145, Department of Computer Science, UC Berkeley, 2009.