Software Watermarking, Obfuscation, and Tamper-Proofing for Software Protection

本研究调查了软件知识产权保护的四种技术：水印、指纹、混淆和防篡改。水印和指纹识别通过在程序中嵌入版权声明或识别号码来防止软件盗版。这可以确认所有权，并允许追踪侵犯版权者。有效的水印不引人注目，具有高数据速率，并且对去水印攻击具有弹性。混淆通过将程序转换为难以分析的等效程序来防御恶意逆向工程。有效的混淆转换是语义保持的，具有较低的计算开销，并且基于阻止它们被撤消的棘手问题。防篡改使程序在检测到它已被修改时发生故障。防篡改代码可以添加到应用程序中，以防止水印被删除，防止病毒被添加，或确保电子商务应用程序的安全敏感代码未被更改。本研究的目标是实现许多目前已知的软件保护算法，并构建可对这些技术进行评估的基准。另一个目标是建立理论模型，以帮助更深入地理解软件知识产权保护的限制。

Christian CollbergThis research investigates four techniques for the intellectual property protection of software:watermarking, fingerprinting, obfuscation, and tamper-proofing.Watermarking and fingerprinting defend against software piracy by embedding a copyright notice or identification number into a program. This asserts ownership and allows tracking of copyright violators. Effective watermarks are unobtrusive, have high data-rates, and are resilient to de-watermarking attacks.Obfuscation defends against maliciousreverse engineering by transforming a program into an equivalent one that is harder to analyze. Effective obfuscating transformations aresemantics-preserving, have low computationaloverhead, and are based on intractable problemsthat prevent them from being undone.Tamper-proofing causes a program to malfunction when it detects that it has been modified. Tamper-proofing codecan be added to an application to protect a watermarkfrom being removed, to prevent a virus from being added, or to ensure that the security-sensitive code of ane-commerce application has not been altered.The goal of this research is to implement many of the currently known algorithms for software protection and to construct benchmarks against which these techniques can be evaluated. An additionalobjective is to build theoretical models that help to gaina deeper understanding of the limits of intellectual property protection of software.