ITR: A Hardware/Compiler Co-Design Approach to Software Protection

ITR：一种硬件/编译器协同设计的软件保护方法

• 批准号: 0325207
• 负责人: Rahul Simha
• 金额: $ 100万
• 依托单位: George Washington University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2003
• 资助国家: 美国
• 起止时间: 2003-09-01 至 2010-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0325207&HistoricalAwards=false
• 关键词: ITR; Hardware; Compiler; Co; Design

ITR: A Compiler-Hardware Co-Design Approach to Software ProtectionPI's: Rahul Simha, Bhagi Narahari, Alok Choudhary, Nasir MemonAbstract:The growing area of software protection aims to address the problems of code understanding and code tampering along with related problems such as authorization. This project will combine novel techniques in the areas of compilers, architecture, and software security to provide a new, efficient, and tunable approach to some problems in software protection. The goal is to address a broad array of research issues that will ultimately enable design tools such as compilers to assist system designers in managing the tradeoffs between security and performance.The main idea behind the proposed approach is to hide code sequences (keys) within instructions in executables that are then interpreted by supporting FPGA (Field Programmable Gate Array) hardware to provide both a "language" (the code sequences) and a "virtual machine within a machine" (the FPGA) that will allow designers considerable flexibility in providing software protection. Thus, by using long sequences and PKI to exchange a secret key with the FPGA while also encrypting the executable with that secret key, a system can be positioned at the high-security (but low-performance) end of the spectrum. Similarly, as will be explained in the proposal, by using shorter sequences and selective encryption, one can achieve high-performance with higher security than is possible with systems that rely only on obscurity.

ITR：一种软件保护的编译器-硬件协同设计方法[ei]: Rahul Simha， Bhagi Narahari, Alok Choudhary， Nasir MemonAbstract：软件保护领域的发展旨在解决代码理解和代码篡改问题以及相关问题，如授权。这个项目将结合编译器、体系结构和软件安全领域的新技术，为软件保护中的一些问题提供一种新的、有效的和可调的方法。目标是解决一系列广泛的研究问题，这些问题最终将使设计工具（如编译器）能够帮助系统设计人员管理安全性和性能之间的权衡。所提出的方法背后的主要思想是将代码序列（密钥）隐藏在可执行文件中的指令中，然后通过支持FPGA（现场可编程门阵列）硬件进行解释，以提供“语言”（代码序列）和“机中虚拟机”（FPGA），这将允许设计人员在提供软件保护方面具有相当大的灵活性。因此，通过使用长序列和PKI与FPGA交换密钥，同时还使用该密钥加密可执行文件，系统可以定位在频谱的高安全性（但低性能）端。类似地，正如将在提案中解释的那样，通过使用更短的序列和选择性加密，可以实现高性能和更高的安全性，而不是仅依赖于模糊的系统。