Symmetric-Key Cryptographic Routine Detection in Anti-Reverse Engineered Binaries Using Hardware Tracingopen access
- Authors
- Park, Juhyun; Park, Yongsu
- Issue Date
- Jun-2020
- Publisher
- MDPI
- Keywords
- cryptographic routine detection; anti-reverse engineered binaries; hardware tracing; binary program analysis
- Citation
- ELECTRONICS, v.9, no.6, pp.1 - 21
- Indexed
- SCIE
SCOPUS
- Journal Title
- ELECTRONICS
- Volume
- 9
- Number
- 6
- Start Page
- 1
- End Page
- 21
- URI
- https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/145607
- DOI
- 10.3390/electronics9060957
- Abstract
- Software uses cryptography to provide confidentiality in communication and to provide authentication. Additionally, cryptographic algorithms can be used to protect software against cracking core algorithms in software implementation. Recently, malware and ransom ware have begun to use encryption to protect their codes from analysis. As for the detection of cryptographic algorithms, previous works have had demerits in analyzing anti-reverse engineered binaries that can detect differences in analysis environments and normal execution. Here, we present a new symmetric-key cryptographic routine detection scheme using hardware tracing. In our experiments, patterns were successfully generated and detected for nine symmetric-key cryptographic algorithms. Additionally, the experimental results show that the false positive rate of our scheme is extremely low and the prototype implementation successfully bypasses anti-reversing techniques. Our work can be used to detect symmetric-key cryptographic routines in malware/ransom ware with anti-reversing techniques.
- Files in This Item
-
- Appears in
Collections - 서울 공과대학 > 서울 컴퓨터소프트웨어학부 > 1. Journal Articles
![qrcode](https://api.qrserver.com/v1/create-qr-code/?size=55x55&data=https://scholarworks.bwise.kr/hanyang/handle/2021.sw.hanyang/145607)
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.