Obfuscation of design intent in object-oriented applications

Abstract

Protection of digital data from unauthorized access is of paramount importance. In the past several years, much research has concentrated on protecting data from the standpoint of confidentiality, integrity and availability. Software is a form of data with unique properties and its protection poses unique challenges. First, software can be reverse engineered, which may result in stolen intellectual property. Second, software can be altered with the intent of performing operations this software must not be allowed to perform.With commercial software increasingly distributed in forms from which source code can be easily extracted, such as Java bytecodes, reverse engineering has become easier than ever. Obfuscation techniques have been proposed to impede illegal reverse engineers. Obfuscations are program transformations that preserve the program functionality while obscuring the code, thereby protecting the program against reverse engineering. Unfortunately, the existing obfuscation techniques are limited to obscuring variable names, transformations of local control flow, and obscuring expressions using variables of primitive types. In this paper, we propose obfuscations of design of object-oriented programs.We describe three techniques for obfuscation of program design. The class coalescing obfuscation replaces several classes with a single class. The class splitting obfuscation replaces a single class with multiple classes, each responsible for a part of the functionality of the original class. The type hiding obfuscation uses the mechanism of interfaces in Java to obscure the types of objects manipulated by the program. We show the results of our initial experiments with a prototype implementation of these techniques. * In particular, we show that the runtime overheads of these obfuscations tend to be small.

Java Obfuscation Approaches to Construct Tamper-Resistant Object-Oriented Programs

“…Sosonkin et al propose obfuscations of object-oriented programs 21) . In their paper they propose three obfuscation techniques, i.e., class coalescing, class splitting, and type hiding.…”

On Evaluating Obfuscatory Strength of Alias-based Transforms using Static Analysis

“…• Obfuscation techniques like identifier renaming [4], class coalescing and class splitting [5] which rely on the difficulty that in the presence of method-overloading, precisely determining if there exists an execution path in a program for which a given reference points to a given method at a point of the program execution is NP-complete [6], [7]. Even though these obfuscation techniques are based on intractable computational problems, we do not know, in practice, how to arbitrarily generate sufficiently hard obfuscated problem instances such that all program analysis techniques would fail (i.e.…”

Java Automatic Identifier Renaming Technique and Protection Method

“…시장 조사 기관 IDC에 따르면 안드로이드 운영체제의 2014년 선적량 기준 시장 점유율은 81.5%로 세계 1위이자 압도적인 시장 지배력을 가지 고 있다 [3] . [10,12] . 에 널리 이용되고 있는 난독화 도구인 프로가드 [14] 와 JODE [15] , RetroGuard [16] , jarg [17] , yGuard [18] 는 메소 드, 클래스 식별자 변환 기법을 지원하고, 도구에 따 라 필드 등 추가적인 식별자 변환 기법을 지원하기도 한다.…”