虛擬黑盒安全的程序混淆:模型、進(jìn)展與挑戰(zhàn)
本文選題:程序混淆 + 虛擬黑盒; 參考:《計(jì)算機(jī)學(xué)報(bào)》2017年12期
【摘要】:在密碼復(fù)雜性安全級(jí)別上實(shí)現(xiàn)程序安全保護(hù)方法,主要有兩種:函數(shù)加密和程序混淆.程序混淆(program obfuscation)是一個(gè)編譯器,它可將一個(gè)程序(布爾表達(dá)的電路)轉(zhuǎn)化為可執(zhí)行的混淆化程序,混淆后的程序與原始程序在相同輸入情況下達(dá)到相同輸出功能,但無(wú)法從混淆程序中獲得有關(guān)原始程序或電路的任何有用信息.程序混淆使軟件代碼逆項(xiàng)工程在密碼學(xué)上是可證明困難的,可用于軟件產(chǎn)權(quán)保護(hù)、安全外包計(jì)算以及敏感代理操作等場(chǎng)合,也可實(shí)現(xiàn)密碼學(xué)領(lǐng)域中的重加密、不可否認(rèn)加密以及對(duì)稱加密轉(zhuǎn)換為公鑰加密等應(yīng)用.目前程序混淆已受到研究人員的廣泛重視,然而B(niǎo)arak等(Eurocrypt’01)已證明對(duì)一般電路的理想化黑盒安全是不可能的.程序混淆設(shè)計(jì)要么針對(duì)某些具體函數(shù)電路,如點(diǎn)函數(shù)、多點(diǎn)函數(shù)、超平面關(guān)系函數(shù)以及重加密功能函數(shù)等,以達(dá)到虛擬黑盒安全的構(gòu)造,要么弱化安全要求獲得實(shí)用性可證明安全的程序混淆方案.鑒于程序混淆在理論研究與實(shí)際應(yīng)用上的重要意義,該文對(duì)程序混淆技術(shù)的系統(tǒng)模型、安全性、方案設(shè)計(jì)以及性能等作綜述性研究和比較分析,從混淆函數(shù)電路的可能性和不可能性角度作了歸納,并對(duì)典型的函數(shù)電路混淆作了描述和探討.對(duì)VBB安全混淆、VGB安全混淆、最可能混淆、可提取混淆以及不可區(qū)分混淆等安全模型進(jìn)行了分析探討.最后對(duì)密碼技術(shù)實(shí)現(xiàn)的混淆在性能上進(jìn)行定義和歸納,對(duì)當(dāng)前方案作比較分析,并對(duì)今后的研究方向作了展望.
[Abstract]:There are two kinds of methods to protect program security on the level of cryptographic complexity: function encryption and program confusion. Program obfuscationis a compiler that converts a program (a Boolean expressed circuit) into an executable obfuscation program that achieves the same output function as the original program in the same input case. However, no useful information about the original program or circuit can be obtained from the obfuscation program. Program confusion makes the inverse engineering of software code difficult to prove in cryptography. It can be used in software property right protection, security outsourced calculation, sensitive agent operation and so on, and it can also realize reencryption in cryptography field. Undeniable encryption and symmetric encryption into public key encryption and other applications. At present, the confusion of program has been paid much attention by researchers. However, Barak et al. Eurocrypt01has proved that the idealized black box security for general circuits is impossible. The program confusion design is either aimed at some specific function circuits, such as point function, multipoint function, hyperplane relation function and reencryption function, in order to achieve the secure construction of virtual black box. Or weaken the security requirements to obtain practicability can prove the security of the program confusion scheme. In view of the importance of program confusion in theoretical research and practical application, this paper makes a comprehensive study and comparative analysis on the system model, security, scheme design and performance of program confusion technology. In this paper, the possibility and impossibility of confusing functional circuits are summarized, and the typical confusion of functional circuits is described and discussed. The security models such as VBB security confusion, most likely confusion, extractable confusion and indistinguishable confusion are analyzed and discussed. Finally, the confusion of cryptography is defined and summarized, the current scheme is compared and analyzed, and the future research direction is prospected.
【作者單位】: 湖北工業(yè)大學(xué)計(jì)算機(jī)學(xué)院;伍倫貢大學(xué)計(jì)算與信息技術(shù)學(xué)院;
【基金】:國(guó)家自然科學(xué)基金(61672010,61370224,61702168) 湖北工業(yè)大學(xué)高層次人才基金(2016-1)資助~~
【分類號(hào)】:TP309
【相似文獻(xiàn)】
相關(guān)期刊論文 前9條
1 商蓉蓉;;“黑盒”還是“白盒”[J];中國(guó)計(jì)算機(jī)用戶;2007年43期
2 張亮;;軟件黑盒調(diào)試技術(shù)[J];程序員;2006年07期
3 趙雙志,孫鳳珍;微機(jī)黑盒系統(tǒng)軟件的開(kāi)發(fā)應(yīng)用[J];石油儀器;1998年02期
4 Peter Seibel;戴瑋;;黑盒之惑——Donald Knuth訪談[J];程序員;2010年07期
5 朱貫淼;曾凡平;袁園;武飛;;基于污點(diǎn)跟蹤的黑盒fuzzing測(cè)試[J];小型微型計(jì)算機(jī)系統(tǒng);2012年08期
6 馮濟(jì)舟;項(xiàng)利萍;劉夢(mèng)飛;;黑盒預(yù)處理功能可測(cè)試性的研究[J];航空標(biāo)準(zhǔn)化與質(zhì)量;2014年04期
7 姬翠萍;;淺談?dòng)?jì)算機(jī)信息隱蔽性設(shè)計(jì)[J];山西電子技術(shù);2007年06期
8 劉敏;;在軟件工程中測(cè)試傳統(tǒng)的應(yīng)用系統(tǒng)——“黑盒”測(cè)試[J];電子制作;2014年07期
9 慕容;電腦病毒種種[J];繼續(xù)教育;1999年02期
相關(guān)碩士學(xué)位論文 前1條
1 張語(yǔ)荻;虛擬黑盒安全的程序混淆理論及應(yīng)用研究[D];湖北工業(yè)大學(xué);2017年
,本文編號(hào):1924980
本文鏈接:http://sikaile.net/kejilunwen/ruanjiangongchenglunwen/1924980.html