SaTC: CORE: Small: Collaborative: Evaluating Performance and Security of Executable Steganography for Surreptitious Programs

SaTC：核心：小型：协作：评估秘密程序的可执行隐写术的性能和安全性

• 批准号: 1811560
• 负责人: William Mahoney
• 金额: $ 17.4万
• 依托单位: University of Nebraska at Omaha
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-08-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1811560&HistoricalAwards=false
• 关键词: SaTC; CORE; Small; Collaborative; Evaluating

Intellectual property protection of software remains a priority for the commercial sector because counterfeiting and piracy erode profits and market share, ultimately causing impacts on companies, consumers and governments. Watermarking for proving digital ownership and obfuscation for hindering adversarial reverse engineering are currently used to provide some level of deterrence against this. This project will investigate novel methods of software protection, hiding executable programs within other executable code.Proposed research will investigate the use of "executable steganography" as a possible anti-reverse engineering technique and a way to watermark software. The goal of this research is to produce viable methods for hiding executable code, expanding the state-of-the-art for this style of program protection, while also characterizing its effectiveness based on capacity, robustness, detectability, invisibility, and resilience. Both University of Nebraska Omaha and University of South Alabama bring key opportunities for broader impacts of this research. Both have a rich tradition of meeting the needs of diverse student bodies, both are in Established Program to Stimulate Competitive Research (EPSCoR) states, with numerous students coming from rural areas. Both universities have extensive K-12 STEM outreach and Scholarship for Service students preparing for future cybersecurity careers. The research teams will directly engage students in the research as part of their academic programs via course projects, senior capstone exercises, and labs. The data for this project will not contain any personal or sensitive information other than the algorithms developed. Other researchers will have access to any databases and the source code via individual requests to the PIs. Research papers and published conference papers, etc. will be available via the project web page: http://loki.ist.unomaha.edu/~wmahoney/ExecutableSteganography/index.html.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

软件的知识产权保护仍然是商业领域的优先事项，因为伪造和盗版的利润和市场份额最终对公司，消费者和政府造成影响。目前使用用于证明数字所有权和混淆的水印，以阻碍对抗性逆向工程来对此提供一定程度的威慑。该项目将调查软件保护的新方法，将可执行程序隐藏在其他可执行的代码中。公共研究将调查使用“可执行隐肌”作为可能的反逆转工程技术的使用以及一种用于水印软件的方法。这项研究的目的是生产可行的方法，以隐藏可执行的代码，扩大这种计划保护风格的最新方法，同时还基于容量，鲁棒性，可检测性，隐形性和弹性来表征其有效性。内布拉斯加州奥马哈大学和南阿拉巴马大学都为这项研究更广泛的影响带来了关键的机会。两者都有满足不同学生团体需求的丰富传统，他们都在启发竞争研究（EPSCOR）国家的既定计划中，许多学生来自农村地区。这两种大学都有广泛的K-12 STEM外展和奖学金，为准备未来网络安全职业的服务学生提供奖学金。研究团队将通过课程项目，高级顶峰练习和实验室直接吸引学生进行研究。 除开发的算法外，该项目的数据将不包含任何个人或敏感信息。其他研究人员将可以通过对PI的单个请求访问任何数据库和源代码。研究论文和发布的会议论文等将通过项目网页：http：//loki.ist.unomaha.edu/~wmahoney/~wmahoney/~wmahoney/executablesteganography/index.html.tml.this奖，这是NSF的法定任务，反映了通过使用基金会的智力效果和广泛的评估来进行评估，并被视为值得的支持。

项目成果

Leave It to Weaver

• DOI: 10.1145/3289239.3291459
• 发表时间: 2018-12
• 期刊: Proceedings of the 8th Software Security, Protection, and Reverse Engineering Workshop
• 作者: W. Mahoney;Joseph Franco;Gregory Hoff;J. McDonald

Evaluating Security of Executable Steganography for Digital Software Watermarking

评估数字软件水印的可执行隐写术的安全性

• 发表时间: 2020
• 期刊: 7th Annual Cybersecurity Symposium
• 作者: Mullins, J.;McDonald, J.T.;Mahoney, W.R.;Andel, T.R.
• 通讯作者: Andel, T.R.

Software Fingerprinting in LLVM

• 发表时间: 2021
• 作者: W. Mahoney;Gregory Hoff;J. McDonald;George Grispos