Reactive Attestation
| Autor: | Alessio Viticchié, Cataldo Basile, Bert Abrath, Mariano Ceccato, Bart Coppens, Andrea Avancini |
|---|---|
| Rok vydání: | 2016 |
| Předmět: |
0301 basic medicine
Technology and Engineering code splitting Computer science Software security 0211 other engineering and technologies sync software attestation remote attestation anti-tampering tamper detection tamper reaction 02 engineering and technology Remote evaluation Computer security computer.software_genre Rendering (computer graphics) 03 medical and health sciences Software User experience design Business logic 021110 strategic defence & security studies business.industry 030104 developmental biology Detect and avoid Software security assurance business computer |
| Zdroj: | SPRO@CCS SPRO'16: PROCEEDINGS OF THE 2016 ACM WORKSHOP ON SOFTWARE PROTECTION |
| Popis: | Anti-tampering is a form of software protection conceived to detect and avoid the execution of tampered programs. tamper detection assesses programs’ integrity with load- or execution-time checks. Avoidance reacts to tampered programs by stopping or rendering them unusable. General purpose reactions (such as halting the execution) stand out like a lighthouse in the code and are quite easy to defeat by an attacker. More sophisticated reactions, which degrade the user experience or the quality of service, are less easy to locate and remove but are too tangled with the program’s business logic, and are thus difficult to automate by a general purpose protection tool. In the present paper, we propose a novel approach to antitampering that (i) fully automatically applies to a target program, (ii) uses Remote Attestation for detection purposes and (iii) adopts a server-side reaction that is difficult to block by an attacker. By means of Client/Server Code Splitting, a crucial part of the program is removed from the client and executed on a remote trusted server in sync with the client. If a client program provides evidences of its integrity, the part moved to the server is executed. Otherwise, a server-side reaction logic may (temporarily or definitely) decide to stop serving it. Therefore, a tampered client application can not continue its execution. We assessed our automatic protection tool on a case study Android application. Experimental results show that all the original and tampered executions are correctly detected, reactions are promptly applied, and execution overhead is on an acceptable level. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|