EAGER: Man-at-the-End Attacks: Defenses and Evaluation Techniques

这项研究考虑了一个场景，其中一个软件需要保护免受攻击者的攻击（终端人员，MATE），可以访问软件，因此可以检查、修改和执行软件。目标是防止攻击者从软件中提取敏感信息，防止他对软件的行为进行更改，或者至少，检测并报告此类攻击的发生。终端攻击可能会造成严重后果。 例如，在个体范围内，它们可以侵犯医疗记录和其他敏感个人数据的隐私和完整性;在更大的范围内，这种攻击可以削弱国家基础设施（如电网和互联网本身）。该项目探讨了保护分布式系统免受MATE攻击的创新方法。 为了实现全面的防御，该项目开发了MATE攻击模型和安全指标，正式描述了设备入侵的过程，提供了攻击工具，可以轻松测试防御算法，并制定了防御评估的社区标准。严格定义的安全指标是必要的研究成果进行比较，现有的和未来的方法。因此，本研究的主要目标是开发评估程序的MATE防御机制。这包括通用的模糊度量和详细的红队演习协议。

This research considers a scenario in which a piece of software needs to be protected against an attacker (the man-at-the-end, MATE) who has physical access to the software and so is able to inspect, modify, and execute it. The goal is to prevent the attacker from extracting sensitive information from the software, to prevent him from making changes to the behavior of the software, or, at least, to detect and report when such attacks are underway.Man-at-the-end attacks can have serious consequences. For example, on an individual scale they can violate the privacy and integrity of medical records and other sensitive personal data; on a larger scale, such attacks can cripple national infrastructure (such as the power grid and the Internet itself).This project explores innovative approaches to protect distributed systems from MATE attacks. To accomplish comprehensive defenses, the project develops MATE attack models and security metrics that formally characterize the process of device compromise, provides attack tools to allow easy testing of defense algorithms, and devises community standards for defense evaluation. Rigorously defined security metrics are necessary for research outcomes to be compared to existing and future approaches. A primary goal of this research is therefore to develop evaluation procedures for MATE defense mechanisms. This includes both universal obfuscation metrics and detailed red-team exercise protocols.