Analysis of Virtual Machine based obfuscation
| Thesis title in Czech: | Analýza zatemnění programů založeného na virtuálních strojích |
|---|---|
| Thesis title in English: | Analysis of Virtual Machine based obfuscation |
| Key words: | deobfuskace, virtuální stroje, wprotect |
| English key words: | deobfuscation, virtual machines, wprotect |
| Academic year of topic announcement: | 2017/2018 |
| Thesis type: | diploma thesis |
| Thesis language: | angličtina |
| Department: | Department of Algebra (32-KA) |
| Supervisor: | Mgr. Milan Boháček |
| Author: | hidden - assigned and confirmed by the Study Dept. |
| Date of registration: | 05.06.2018 |
| Date of assignment: | 05.06.2018 |
| Confirmed by Study dept. on: | 14.06.2018 |
| Date and time of defence: | 18.09.2018 09:00 |
| Date of electronic submission: | 20.07.2018 |
| Date of submission of printed version: | 20.07.2018 |
| Date of proceeded defence: | 18.09.2018 |
| Opponents: | Mgr. Martin Bálek |
| Guidelines |
| Virtual machines are one of the techniques of machine code obfuscation. The student shall go through the literature and analyse a specific obfuscator called WProtect. The analysis should contain a description of its obfuscation principles and an implementation of an automatic deobfuscator. The student shall also propose improvements to WProtect that mitigate exploited vulnerabilities and significantly increase the computational complexity of an automated obfuscated code analysis. |
| References |
| Cifuentes, C. (1994). Reverse compilation techniques (p. 56). Queensland University of Technology, Brisbane.
Collberg, C., Thomborson, C., & Low, D. (1997). A taxonomy of obfuscating transformations. Department of Computer Science, The University of Auckland, New Zealand. https://researchspace.auckland.ac.nz/bitstream/handle/2292/3491/TR148.pdf Davis, B., Beatty, A., Casey, K., Gregg, D., & Waldron, J. (2003, June). The case for virtual register machines. In Proceedings of the 2003 workshop on Interpreters, virtual machines and emulators (pp. 41-49). ACM. Jonischkeit, C. (2016). Machine Code Obfuscation via Instruction Set Reduction and Control Flow Graph Linearization: Analysis and Countermeasures (Doctoral dissertation, Bachelor’s Thesis. Technische Universität München). https://kirschju.re/static/ba_jonischkeit_2016.pdf |
| Preliminary scope of work |
| Předběžně domluveno s panem Středou. |