Symmetric-Key Cryptographic Routine Detection in Anti-Reverse Engineered Binaries Using Hardware Tracing
- Title
- Symmetric-Key Cryptographic Routine Detection in Anti-Reverse Engineered Binaries Using Hardware Tracing
- Author
- 박용수
- Keywords
- cryptographic routine detection; anti-reverse engineered binaries; hardware tracing; binary program analysis
- Issue Date
- 2020-06
- Publisher
- MDPI
- Citation
- ELECTRONICS, v. 9, no. 6, article no. 957
- Abstract
- Software uses cryptography to provide confidentiality in communication and to provide authentication. Additionally, cryptographic algorithms can be used to protect software against cracking core algorithms in software implementation. Recently, malware and ransom ware have begun to use encryption to protect their codes from analysis. As for the detection of cryptographic algorithms, previous works have had demerits in analyzing anti-reverse engineered binaries that can detect differences in analysis environments and normal execution. Here, we present a new symmetric-key cryptographic routine detection scheme using hardware tracing. In our experiments, patterns were successfully generated and detected for nine symmetric-key cryptographic algorithms. Additionally, the experimental results show that the false positive rate of our scheme is extremely low and the prototype implementation successfully bypasses anti-reversing techniques. Our work can be used to detect symmetric-key cryptographic routines in malware/ransom ware with anti-reversing techniques.
- URI
- https://www.mdpi.com/2079-9292/9/6/957https://repository.hanyang.ac.kr/handle/20.500.11754/168786
- ISSN
- 2079-9292
- DOI
- 10.3390/electronics9060957
- Appears in Collections:
- COLLEGE OF ENGINEERING[S](공과대학) > COMPUTER SCIENCE(컴퓨터소프트웨어학부) > Articles
- Files in This Item:
- Symmetric-Key Cryptographic Routine Detection in Anti-Reverse Engineered Binaries Using Hardware Tracing.pdfDownload
- Export
- RIS (EndNote)
- XLS (Excel)
- XML