资源描述：
《oblivious hashing a stealthy software integrity verification primitive》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。
1、ObliviousHashing:AStealthySoftwareIntegrityVerificationPrimitiveYuqunChen¹,RamarathnamVenkatesan¹,MatthewCary²,RuomingPang³,SaurabhSinha²,andMariuszH.Jakubowski¹¹MicrosoftResearch,OneMicrosoftWay,Redmond,WA98052²UniversityofWashington,Box352350,Seattle,WA98195³PrincetonUniversity,35OldenStree
2、t,Princeton,NJ08544{yuqunc,venkie,mariuszj}@microsoft.com{mcary,saurabh}@cs.washington.edurpang@cs.princeton.eduAbstract.WedescribeanovelsoftwareverificationprimitivecalledObliviousHashing.Unlikeprevioustechniquesthatmainlyverifythestaticshapeofcode,thisprimitiveallowsimplicitcomputationofaha
3、shvaluebasedontheactualexecution(i.e.,space-timehistoryofcomputation)ofthecode.Wealsodiscussitsapplicationsinlocalsoftwaretamperresistanceandremotecodeauthentication.1.IntroductionAmajorchallengeinSoftwareTamperResistanceisfindingastealthyandrobustprimitivetoascertaintheoperationalcorrectness
4、ofprotectedsoftware.Aprevalentmethodusedtodayverifiestheshapeofthecode,andsometimescriticaldata,beforeorduringtheruntime.Itisaccomplishedbycomputingacryptographicchecksumononeormoresegmentsofthecodethatisbeingprotected.Theshape-verificationapproachhasmanydrawbacksofwhichwementiontwohere.First
5、,itisquitestraightforwardtodetecttheverificationroutine,owingtotheatypicalnatureoftheoperation,sincemostapplicationsdonotreadtheirowncodesegments.Second,thisapproachfailstodetectcertainbehavioralordatamodificationstothesoftware.Forexample,ahackercantemporarilychangethereturnresultbypatchingar
6、egister,rightbeforetheprotectedfunctionreturns,withouthavingtoalterthecode.Toaddresssuchproblems,weproposeanewconceptcalledObliviousHashing(OH).Themainideaistohashtheexecutiontraceofapieceofcode,therebyallowingustoverifyprobabilisticallyordeterministicallytherun-timebehaviorofthesoftware.Weac
7、complishthisbyinjectingadditionalcomputation(hashingcode)intothesoftware(hostcode).Thehashingcodeimplicitlycomputesahashvaluefromthedynamicexecutioncontextofthehostcode.Amainfeatureofourinjectionmethodistoblendthehashingcodeseamlesslywiththeh
