LO! LLVM Obfuscator

dc.contributor.authorRIERA, FRANCISCO BLAS IZQUIERDO
dc.contributor.departmentChalmers tekniska högskola / Institutionen för data- och informationsteknik (Chalmers)sv
dc.contributor.departmentChalmers University of Technology / Department of Computer Science and Engineering (Chalmers)en
dc.date.accessioned2019-07-03T13:35:31Z
dc.date.available2019-07-03T13:35:31Z
dc.date.issued2014
dc.description.abstractAs part of this Master’s Thesis some patches to LLVM have been written allowing the application of obfuscation techniques to the LLVM IR. These patches allow both obfuscation and polymorphism which results in code that is both hard to read and different from previous versions. This, makes finding the real changes made between versions harder for the attacker. The techniques are applied using a function attribute as the seed for the CPRNGs used by the transformations as a source of entropy. As a result it is possible to mark the functions that should be obfuscated in the prototypes allowing the developer to create binaries with the desired amount of changes and a sufficiently large amount of functions that are hard to read and (if the seed is changed) different from previous versions. In this Master’s Thesis the possible ways in which the applied techniques can be “reversed” have been evaluated to be able to compare the resulting code. For this to succeed a transformation able to obtain LLVM IR from the resulting binary code is necessary, this was not done as part of this work.
dc.identifier.urihttps://hdl.handle.net/20.500.12380/211348
dc.language.isoeng
dc.setspec.uppsokTechnology
dc.subjectInformations- och kommunikationsteknik
dc.subjectData- och informationsvetenskap
dc.subjectData- och systemvetenskap
dc.subjectInformation & Communication Technology
dc.subjectComputer and Information Science
dc.subjectComputer and systems science
dc.titleLO! LLVM Obfuscator
dc.type.degreeExamensarbete för masterexamensv
dc.type.degreeMaster Thesisen
dc.type.uppsokH
local.programmeComputer systems and networks (MPCSN), MSc
Ladda ner
Original bundle
Visar 1 - 1 av 1
Hämtar...
Bild (thumbnail)
Namn:
211348.pdf
Storlek:
1.28 MB
Format:
Adobe Portable Document Format
Beskrivning:
Fulltext