Software Watermarking, Obfuscation, and Tamper-Proofing for Software Protection

用于软件保护的软件水印、混淆和防篡改

• 批准号: 0073483
• 负责人: Christian Collberg
• 金额: $ 26.5万
• 依托单位: University of Arizona
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2000
• 资助国家: 美国
• 起止时间: 2000-09-01 至 2004-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0073483&HistoricalAwards=false
• 关键词: Software; Watermarking; Obfuscation; Tamper; Proofing

Christian CollbergThis research investigates four techniques for the intellectual property protection of software:watermarking, fingerprinting, obfuscation, and tamper-proofing.Watermarking and fingerprinting defend against software piracy by embedding a copyright notice or identification number into a program. This asserts ownership and allows tracking of copyright violators. Effective watermarks are unobtrusive, have high data-rates, and are resilient to de-watermarking attacks.Obfuscation defends against maliciousreverse engineering by transforming a program into an equivalent one that is harder to analyze. Effective obfuscating transformations aresemantics-preserving, have low computationaloverhead, and are based on intractable problemsthat prevent them from being undone.Tamper-proofing causes a program to malfunction when it detects that it has been modified. Tamper-proofing codecan be added to an application to protect a watermarkfrom being removed, to prevent a virus from being added, or to ensure that the security-sensitive code of ane-commerce application has not been altered.The goal of this research is to implement many of the currently known algorithms for software protection and to construct benchmarks against which these techniques can be evaluated. An additionalobjective is to build theoretical models that help to gaina deeper understanding of the limits of intellectual property protection of software.

Christian Collberg本研究调查了软件知识产权保护的四种技术：水印、指纹、混淆和防篡改。水印和指纹通过在程序中嵌入版权声明或标识号来防止软件盗版。这会声明所有权并允许追踪版权侵犯者。有效的水印是不显眼的，具有高的数据速率，并能抵抗去水印攻击。混淆通过将程序转换为更难分析的等价程序来抵御恶意的逆向工程。有效的混淆转换是一种安全保护，具有低计算开销，并且基于防止它们被撤销的棘手问题。防篡改会导致程序在检测到被修改时发生故障。防篡改编解码器可以被添加到应用程序中，以保护水印不被删除，防止病毒被添加，或确保电子商务应用程序的安全敏感代码没有被改变。本研究的目标是实现许多目前已知的软件保护算法，并构建这些技术可以评估的基准。另一个目标是建立理论模型，帮助更深入地了解软件知识产权保护的局限性。