Developers of parallel programming are faced with choices of using various Java locks. Choosing the best lock is a challenging task because a multithreaded application implemented using different locks may end up with uncertain performance. There is a strong need for automated tool support that helps Java programmers choose the best lock for each specific application. This paper presents an automated transformation approach to convert an implementation using a synchronized lock to a ReentrantLock or a ReentrantReadWriteLock at the bytecode level. For the ReentrantLock, our approach runs analysis for global monitors using the visitor pattern in the Joeq compiler. For the ReentrantReadWriteLock, a read or write lock is chosen after a side-effect analysis. Then, the proposed system validates the consistency of the analysis results to ensure a correct sequence of lock usage. Finally, lock operations and related thread communication operations are transformed into a ReentrantLock or a ReentrantReadWriteLock using a bytecode transformation framework Javassist. We validate our approach on several benchmarks including RBTree, PC, SPECjbb2005, and HSQLDB. The experimental results show that the proposed automated transformation approach can transform these benchmarks successfully in a timely fashion.

/pdf/refactoring-java-programs-for-customizable-locks-based-on-2sijfqv19q.pdf

Refactoring Java Programs for Customizable Locks Based on Bytecode Transformation

The invention discloses a code reinforcing method for lowering the risk that an application program is reversely broken. The method comprises the steps of receiving an original code sent by a client; analyzing the semantic of the original code to obtain an analysis result; according to the analysis result, reinforcing the original code to obtain a reinforced code, wherein the reinforced code and the execution result of the original code are equivalent, and the complexity of decompilation of the compiled reinforced code through a reverse tool is larger than that of decompilation of the compiled original code. The invention further discloses a code reinforcing device.

Code reinforcing method and device

The invention discloses a virtualization software protecting method having a data stream confusion function. The method comprises a step 1 of performing PE file detection; a step 2 of positioning a key code segment; a step 3 of converting a local x86 instruction into a virtual instruction; a step 4 of encoding the virtual instruction to generate a corresponding byte code instruction; a step 5 of performing double process design on a scheduling structure of a virtual machine; a step 6 of performing data stream confusion on a Handler in the virtual machine; a step 7 of concealing original predicate information in a program and adding new predicate information to form a false execution stream branch; and a step of reconstructing a target file. According to the method, a computer system is utilized to perform virtualization protection on an executable binary code file under a windows system, and the method is high in protection strength and has easiness in expansion.

Virtualization software protecting method having data stream confusion function

The invention discloses an ELF file protection method and system based on ARM instruction virtualization. The method includes the steps that an original function instruction is converted into bytecodes; a register and stack information of an original function are stored, a jump instruction is added, and other instructions are deleted; the jump instruction is executed, and the bytecodes are interpreted by jumping to an interpreting engine. In this way, the original function instruction is converted into the bytecodes in a virtualization mode, the difficulty of a cracker is increased, and the file protection strength is improved.

ELF file protection method and system based on ARM instruction virtualization

Application repackaging is a severe problem for Android systems. Many Android malware programs pass the mobile platform fundamental security barriers through repackaging other legitimate apps. Most of the existing anti-repackaging schemes only work at the Android DEX bytecode level, but not for the shared object files consisting of native ARM-based machine instructions. Lacking the protection at the native machine code level opens a door for attackers to launch repackaging attacks on the shared libraries that are commonly used on Android apps. This paper presents CodeCloak, a novel anti-repackaging system to protect Android apps at the native code level. CodeCloak employs binary-level code virtualization techniques to protect the target application. At the native machine code level, it uses a newly designed stack-based virtualization structure to obfuscate and protect critical algorithm implementations that have been compiled into native instructions. It leverages multiple dynamic code protection schemes to increase the diversity of the program behavior at runtime, aiming to increase the difficulties for performing code reverse engineering. We evaluate CodeCloak under typical app repackaging scenarios. Experimental results show that CodeCloak can effectively protect apps against repackaging attacks at the cost of minimum overhead.

Exploiting Binary-Level Code Virtualization to Protect Android Applications Against App Repackaging

The invention discloses a code virtualization software protection system realizing instruction set randomization, and belongs to the field of computer software security. According to the code virtualization software protection system, a virtual instruction set is built in the system; key code in a program to be protected is disassembled to obtain a local instruction sequence; then, the local instruction sequence is converted into a first virtual instruction according to the virtual instruction set of architecture; the first virtual instruction is coded to obtain a byte code instruction; the byte code instruction is combined with a generated attached virtual machine assembly to obtain an attached file; the attached file is combined with the program to be protected to obtain a first file; and junk data filling is performed on the first file to obtain the final protected program. The code virtualization software protection system has the advantages that the complexity of the program to be protected can be improved; and the analysis time of an analyzer on the program to be protected is prolonged, so that the protection capability of the program to be protected is enhanced.

Code virtualization software protection system realizing instruction set randomization

Code virtualization built upon virtual machine (VM)technologies is emerging as a viable method for implementing code obfuscation to protect programs against unauthorized analysis. State-of-the-art VM-based protection approaches use a fixed set of virtual instructions and bytecode interpreters across programs. This, however, exposes a security vulnerability where an experienced attacker can use knowledge extracted from other programs to quickly uncover the mapping between virtual instructions and native code for applications protected under the same scheme. In this paper, we propose a novel VM-based code obfuscation system to address this problem. The core idea of our approach is to obfuscate the mapping between the opcodes of bytecode instructions and their semantics. We achieve this by partitioning each protected code region into multiple segments where the mapping of opcodes and their semantics is randomized in different ways in different segments. In this way, each bytecode instruction will be translated into different native code in different sections of the obfuscated code. This significantly increases the diversity of the program behavior. As a result, the knowledge of bytecode to native code mappings obtained from other programs will be less useful when targeting a new program. We evaluate our approach on a set of real-world applications and compare it against two state-of-the-art VM-based code obfuscation approaches. Experimental results show that our approach is effective, which provides stronger protection with comparable runtime overhead and code size.

/pdf/exploiting-code-diversity-to-enhance-code-virtualization-3tpqsgefsi.pdf

Exploiting Code Diversity to Enhance Code Virtualization Protection

The present invention discloses a binary code anti-obfuscation method based on semanteme, belonging to the field of software security. The method comprises: extracting execution process information of a target program; conducting a taint analysis on the execution process information to obtain a control flow graph; and carrying out instruction tailoring on the target program according to the control flow graph to obtain a concise control flow graph. According to the method provided by the present invention, after it is determined that the target program is an executable file, the target program is executed, all the data during execution period is acquired, key data in all the data and instruction sequences relevant to the key data are labeled, the control flow graph is established by using the instruction sequences with labels, and finally the instruction sequences without labels in the control flow graph are deleted to obtain a concise control flow graph. Anti-obfuscation processing can be performed for the malicious software according to the concise control flow graph, thereby addressing the defect of poor universality of the prior art, improving the application universality that anti-obfuscation processing, and reducing the system overhead to some extent.

Binary code anti-obfuscation method based on semanteme

The invention discloses a multi-execution path construction method for malicious software and belongs to the field of safety of computerscomputer security The multi-execution path construction method comprises two parts of obtaining an initial control flow diagram and constructing a complete control flow diagram according to the initial control flow diagram The control flow diagram of a target program is constructed through establishing a program snapshot corresponding to the target program when the target program is nearly finished; the program snapshot is loaded and an execution path of a condition transferring instruction is modified; the target program is continually executed according to the modified execution path; the steps are repeated; and finally, the complete control flow diagram is constructed according to all the initial control flow diagrams, and all execution paths of the target program, namely the malicious software, can be obtained according to the complete control flow diagram Compared to the prior art, partial behaviors only capable of obtaining the target program when the target program is analyzed according to the single path only can be avoided; and the potential safety hazards and the economic losses, caused by the fact that all the execution paths of the target program cannot be obtained, are reduced, and the system expenditure is reduced

Multi-execution path construction method for malicious software

Popular Tasks used by Researchers

How can I help with your research?

Get more enhanced response by uploading the PDFs you want me to reference.

No relevant PDFs in your library

SciSpace is the AI research assistant for academics. Run systematic literature reviews on 280M+ papers, and write papers with cited sources. Trusted by 1M+ students, PhDs & researchers.

SciSpace | AI for Research

We encountered an error while loading the panel. Please try refreshing the page.

Something went wrong

Analyze PDFs

Code & Manuscripts

Funding & Grants

Literature & Patents

Medical & Clinical Data

Systematic Review

Visualize & Present

Web & Data

Build a Google Scholar-like website for your research.

Build a website

Create charts and images for your research

Create a Chart

Write a paper for submission to a journal

Draft a manuscript

Patent Search

Design eye-catching scientific posters in minutes.

Scientific Poster Generation

Systematic Literature Review

Anyone with the link can view this chat. You can switch it back to private anytime.

One task is running at the moment. Your messages will be shown right after.

Drag and drop or click here to browse

Loved by <highlight>1 million+</highlight> researchers

Extract a list of specific topics and their sources from unstructured text

Topics

Compare and analyze relevant papers that matches with your search

Papers

Get insights from PDFs and bookmarked papers from your library

My library

Recent searches

Try searching for:

Catch AI-generated content in scholarly and non-scholarly content

{ai} Detector

Ai Writer

Get PDF Summaries, highlighted text explanations 

Chat with PDF

Effortlessly create in-text citations and bibliographies in APA and 2,500 other formats

Citation generator

Get explanations, summaries, and answers on academic papers

Ease up your research workflow with {scispace}'s cohort of exciting AI tools

Elevate your academic writing skills and convey your ideas the way you want

Paraphraser

Explore our range of reading and writing tools

Your file is being prepared and should be ready in a few minutes. If it's a large file, it might take a bit longer. You can close this window, and we'll email you the file when it's done.

You have reached a maximum limit of <strong>{limit}</strong> columns in the table. Remove at least <strong>1</strong> column to add or create another one.

Li Guanghui

Author Tools

Chat about Author

Papers

Code virtualization software protection system realizing instruction set randomization

Exploiting Code Diversity to Enhance Code Virtualization Protection

Binary code anti-obfuscation method based on semanteme

Multi-execution path construction method for malicious software