ISSISP 2012

Courses

• Bjorn De Sutter: "HW & SW attacks"

HW & SW attacks

×

In this part of the course, we will first study hardware-based attacks on software and software-based defense mechanisms against those attacks. A first category of attacks we will study are side-channel attacks. Such attacks observe hardware behavior (power consumption, execution time, cache behavior, etc ... ) of processors running sensitive software to extract sensitive information from that software. A second category are hardware tampering techniques, such as controlled power glitches or laser light attacks to modify the behavior of running software such that the software starts exposing sensitive information. For both types of attacks, software transformations will be discussed that mitigate the leaking of sensitive information and provide fault injection tolerance.

Bjorn De Sutter, University of Ghent, Belgium



Bjorn De Sutter is associate professor in the Computer Systems Lab at the Faculty of Engineering and Architecture of Ghent University. He got both his MSc and his PhD from Ghent University in 1997 resp. 2002. Amongst others, he teaches courses on Compilers, and on Software Hacking and Protection, which are also his major research interests. The focus of his compiler technology research is on increasing the productivity of programmers by automating necessary tasks for non-functional requirements, incl. the protection of software against all kinds of attacks. His more than 80 peer-reviewed publications cover protections against fault injection attacks, against tampering attacks, against reverse engineering attacks, against memory exploit attacks, against patch-based attacks, and against timing side channel attacks. He coordinated the EU FP7 STREP ASPIRE (Advanced Software Protection: Integration, Research, and Exploitation), which was evaluated by the EC as excellent in Feb. 2017, and participated in numerous other national and international projects. He received the Annual FWO Barco Award in 1998 for his Master thesis, and is the recipient of a 2013 HiPEAC Technology Transfer Award.

• Christian Collberg: "Software protection and MATE attacks: The Practice and Theory of Software Protection"

Software protection and MATE attacks: The Practice and Theory of Software Protection

×

In this part of the course we will study ways to protect programs from software piracy, tampering, and reverse engineering. We will study practical software-based protection algorithms, the theoretical limits of such protection, as well has hardware-based solutions. In the course we will learn what methods bad guys use to extract secrets from programs and what methods good guys use to protect these secrets. The techniques studied in software protection are known as code obfuscation, software watermarking, tamperproofing, and birthmarking. Software watermarking is used to trace software pirates, code obfuscation is used to make it more difficult to reverse engineer a program, tamperproofing is used to make it harder to modify a program, and birthmarking is used to detect code theft. These techniques are commonly used to protect cryptographic primitives in digital rights management (DRM) software, to prevent the removal of license checks, to hide secret algorithms and protocols in programs such as Skype, and to detect cheating in computer science programming assignments.

In this class we will study parts of the book Surreptitious Software by Christian Collberg and Jasvir Nagra, pp 816, Addison-Wesley Professional, 2009.

Christian Collberg, University of Arizona, USA



Christian Collberg is a Professor at the Department of Computer Science at the University of Arizona. He got his PhD from Lund University, Sweden and taught at University of Auckland, New Zealand, before joining Arizona. His current research interests lie in the protection of software from reverse engineering and tampering, as well as in the reproducibility of computer science research (see FindResearch.org). He is the author of "Surreptitious Software, Obfuscation, Watermarking, and Tamperproofing for Software Protection".

• Jack Davidson: "Software Security by Dynamic Translation"

Software Security by Dynamic Translation

×

Computing is increasingly ubiquitous. It is used in many areas of daily life, from cellular telephones, managing health and financial records, e-commerce, and electronic voting, to name a few. Users of these various computing platforms demand high quality, undisrupted service, and privacy and security of their personal information. Beyond personal use, much of society’s critical infrastructure is also controlled by complex software systems. Unfortunately, because of its complexity, it is difficult to build software that is impervious from attack by malicious adversaries. Indeed, every day there are reports of intrusions and security breaches that result in financial loss and disclosure of confidential or proprietary information. A promising approach for providing protection of software from a wide variety of attacks is the use of lightweight process virtualization via software dynamic translation. This course will introduce students to the concept of software dynamic translation, discuss its efficient implementation, and describe its use to protect software from various types of attacks. To introduce students to the power and utility of software dynamic translation, the course will include several hands-on exercises where the student implements a protection scheme using software dynamic translation.

Jack Davidson, University of Virginia, USA



I am Professor of Computer Science at the University of Virginia. I received my Ph.D. from the University of Arizona in 1981 and joined the University of Virginia in 1982. Over the years, I have worked in many areas including compilers, embedded systems, high-performance computing, and computer security. My current research foci is on software protection and computer security. In the area of software security, my group has developed dynamic methods to prevent adversaries from compromising intellectual property. In the area of computer security, we have developed methods for "hardening" binaries to make them impervious to cyber attack. In 2014–2016, I lead a team at the University of Virginia that competed in the DARPA Cyber Grand Challenge (CGC)—a contest to build an autonomous supercomputer to automatically analyze vulnerable binaries and patch them—all without human intervention. Our entry, produced in collaboration with Grammatech, Inc., finished second winning a $1M prize. I am also leading a DARPA project, "Double Helix: High Assurance N-variant Systems." Double Helix is a binary analysis and transformation system that processes binary applications and produces variants with diverse binary structures that are intended to be deployed within a multi-variant system. A unique aspect of Double Helix is that it employs structured diversity to guarantee that variants behave differently yielding high-assurance systems. Both CGC and Double Helix rely on high-precision binary analysis and rewriting to reverse engineer and transform binaries.

• Roberto Giacobazzi: "Theory and practice of code attack: Static analysis, semantics and code transformation"

Theory and practice of code attack: Static analysis, semantics and code transformation

×

In this course we will study systematic and automatic methods for code protection against automatic reverse engineering. Automatic reverse engineering consists in any automatic tool used in reverse engineering for understanding programs semantics, such as debugging, static analysis, dynamic analysis, tracing, profiling etc. We will specify these tools as suitable abstractions of an interpreter, providing a uniform approach for the model of attack in SW. Obfuscation and watermarking will be then discussed as methods for making these abstract interpreters incomplete, i.e. failing to extract hidden information. The approach provides an advanced theoretical foundation for deeply understanding the hiding of information in programming. Systematic methods for making abstract interpreters imprecise will be discussed together with concrete examples and challenging future research directions. The class will consists of lectures and experiences in Lab. Slides and material will be distributed to the course attendees.

Roberto Giacobazzi, Università degli Studi di Verona, Italy



Roberto Giacobazzi was born in 1964 in Modena, Italy. He received the Laurea degree in Computer Science in 1988 from the University of Pisa, and in 1993 he received the Ph.D. in Computer Science from the same university. From 1993 to 1995 he had a Post Doctoral Research position at Laboratoire d'Informatique (LIX), Ecole Polytechnique (Paris) in the equipe Cousot. From 1995 to 1998 he was (tenured) Assistant Professor in Computer Science at the University of Pisa. From 1998 to 2000 he was Associate Professor at the University of Verona. From May 2000 until now he is Full Professor in Computer Science at the University of Verona. The research interests of Roberto Giacobazzi include abstract interpretation, static program analysis, semantics of programming languages, program verification, abstract model-checking, program transformation and optimization, digital asset protection, code obfuscation, software watermarking and lattice theory.

• Yuan Xiang Gu: "Software security patterns: White-Box Attacks and Software Protection Technology"

Software security patterns: White-Box Attacks and Software Protection Technology

×

In nowadays life, no matter for business use or personal use, un-trusted environments are everywhere and even becoming more dominated in digital world from home networks to consumer devices, to the public Internet, to the cloud, and to the Internet of Things, where traditional computer and network security are inadequate to address these white-box attacks. The wireless web connection quickly gains in popularity in recent years and provides anytime/anywhere connection to playing contents, e-mail, instant messaging, mobile banking, mobile payment, weather and travel information, and lots of other digital information services. All of these makes white-box security and digital asset protection much more challenging.

This course describes and discusses white-box software attack scenarios and security patterns (that are abstracted from many application domains in terms of use cases, vulnerability and threat analysis, and security solutions), the security lifecycle of digital asset application mandating protection from creation, through distribution and then ultimately consumption from being deployed in the field. Also, we detail certain currently software protection technologies in markets as a guide to the state of the art. Moreover, a pattern-based white-box security modeling approach will be introduced.

Yuan Xiang Gu, Irdeto, Canada



Mr. Gu was the co-founder of Cloakware Corporation that. In 2007, Cloakware was acquired by Irdeto. Since then, as a chief architect and a senior research director of Irdeto, Mr. Gu is also leading the development of next generation Cloakware technology, and research collaboration with research communities worldwide. Mr. Gu has been invited and visited over 40 universities and research institutes in North American, Europe and Asia, and organizing international security forums (workshops, summer schools, and association) and becomes an active speaker at many international conferences and workshops to promote software security and protection. Mr. Gu was invited being a guest professor of Northwest University in China. As a native Chinese, Mr. Gu often represents Irdeto to involve many business development and research collaboration activities in China. Prior to joining Cloakware, Mr. Gu has worked as a senior scientist and architect at Nortel Networks. Previously, Mr. Gu was a visiting professor at the Computer Science School of McGill University at Montreal of Canada between 1988-1990. Before relocated to Canada, Mr. Gu was a professor in the Computer Science Department at Northwest University in China. Mr. Gu received the First Outstanding Young Scientists Foundation Award from the Chinese Academy of Sciences in 1985, and has about four decades of software research and development knowledge and expertise, and has published more than two dozens of patents and patent applications.