Formal Verification of Control-flow Graph Flattening - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2016

Formal Verification of Control-flow Graph Flattening

Alix Trieu

Résumé

Code obfuscation is emerging as a key asset in security by obscurity. It aims at hiding sensitive information in programs so that they become more difficult to understand and reverse engineer. Since the results on the impossibility of perfect and universal obfuscation, many obfuscation techniques have been proposed in the literature, ranging from simple variable encoding to hiding the control flow of a program. In this paper, we formally verify in Coq an advanced code obfuscation called control-flow graph flattening, that is used in stateof-the-art program obfuscators. Our control-flow graph flattening is a program transformation operating over C programs, that is integrated into the CompCert formally verified compiler. The semantics preservation proof of our program obfuscator relies on a simulation proof performed on a realistic language, the Clight language of CompCert. The automatic extraction of our program obfuscator into OCaml yields a program with competitive results.
Fichier principal
Vignette du fichier
cpp2016.pdf (193.71 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01242063 , version 1 (27-05-2016)

Identifiants

Citer

Sandrine Blazy, Alix Trieu. Formal Verification of Control-flow Graph Flattening. Certified Proofs and Programs (CPP 2016), Jan 2016, Saint-Petersburg, United States. pp.12, ⟨10.1145/2854065.2854082⟩. ⟨hal-01242063⟩
474 Consultations
462 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More