Building an obfuscation compiler based on LLVM infrastructure

The paper describes the obfuscating transformations, which were implemented while developing an LLVM-based obfuscating compiler in ISP RAS.  The proposed transformations are based on well-known obfuscation algorithms and are specifically improved to resist better to static analysis deobfuscation tec...

Full description

Bibliographic Details
Main Authors: V. P. Korchagin, S. F. Kurmangaleev, V. V. Savchenko, S. S. Sargsyan
Format: Article
Language:English
Published: Ivannikov Institute for System Programming of the Russian Academy of Sciences 2018-10-01
Series:Труды Института системного программирования РАН
Subjects:
Online Access:https://ispranproceedings.elpub.ru/jour/article/view/974
_version_ 1811278266317668352
author V. P. Korchagin
S. F. Kurmangaleev
V. V. Savchenko
S. S. Sargsyan
author_facet V. P. Korchagin
S. F. Kurmangaleev
V. V. Savchenko
S. S. Sargsyan
author_sort V. P. Korchagin
collection DOAJ
description The paper describes the obfuscating transformations, which were implemented while developing an LLVM-based obfuscating compiler in ISP RAS.  The proposed transformations are based on well-known obfuscation algorithms and are specifically improved to resist better to static analysis deobfuscation techniques.  The application performance decrease estimation and the increase of application memory consumption estimation are presented. Also, the possibility of source code information recovery is estimated. The implemented obfuscating transformations can be applied together to the given application to provide the strong protection from the static analysis deobfuscation attacks.
first_indexed 2024-04-13T00:31:39Z
format Article
id doaj.art-e0065aaefe1c49c1bec67ec38edeefdd
institution Directory Open Access Journal
issn 2079-8156
2220-6426
language English
last_indexed 2024-04-13T00:31:39Z
publishDate 2018-10-01
publisher Ivannikov Institute for System Programming of the Russian Academy of Sciences
record_format Article
series Труды Института системного программирования РАН
spelling doaj.art-e0065aaefe1c49c1bec67ec38edeefdd2022-12-22T03:10:27ZengIvannikov Institute for System Programming of the Russian Academy of SciencesТруды Института системного программирования РАН2079-81562220-64262018-10-0123010.15514/ISPRAS-2012-23-5974Building an obfuscation compiler based on LLVM infrastructureV. P. Korchagin0S. F. Kurmangaleev1V. V. Savchenko2S. S. Sargsyan3ИСП РАНИСП РАНИСП РАНИСП РАНThe paper describes the obfuscating transformations, which were implemented while developing an LLVM-based obfuscating compiler in ISP RAS.  The proposed transformations are based on well-known obfuscation algorithms and are specifically improved to resist better to static analysis deobfuscation techniques.  The application performance decrease estimation and the increase of application memory consumption estimation are presented. Also, the possibility of source code information recovery is estimated. The implemented obfuscating transformations can be applied together to the given application to provide the strong protection from the static analysis deobfuscation attacks.https://ispranproceedings.elpub.ru/jour/article/view/974llvmобфускация
spellingShingle V. P. Korchagin
S. F. Kurmangaleev
V. V. Savchenko
S. S. Sargsyan
Building an obfuscation compiler based on LLVM infrastructure
Труды Института системного программирования РАН
llvm
обфускация
title Building an obfuscation compiler based on LLVM infrastructure
title_full Building an obfuscation compiler based on LLVM infrastructure
title_fullStr Building an obfuscation compiler based on LLVM infrastructure
title_full_unstemmed Building an obfuscation compiler based on LLVM infrastructure
title_short Building an obfuscation compiler based on LLVM infrastructure
title_sort building an obfuscation compiler based on llvm infrastructure
topic llvm
обфускация
url https://ispranproceedings.elpub.ru/jour/article/view/974
work_keys_str_mv AT vpkorchagin buildinganobfuscationcompilerbasedonllvminfrastructure
AT sfkurmangaleev buildinganobfuscationcompilerbasedonllvminfrastructure
AT vvsavchenko buildinganobfuscationcompilerbasedonllvminfrastructure
AT sssargsyan buildinganobfuscationcompilerbasedonllvminfrastructure