SlideServe
Menu
Préférences
© SlideServe · v2026

Enhancing Mobile Agent Security through Obfuscation Techniques: Final Status Report

alia avatar
10 diapositives · 225 Views · Oct 04, 2014

This report provides a comprehensive overview of the research and development efforts focused on self-protecting mobile agents funded by OASIS and Active Networks. It details the evolution of our obfuscation techniques, the creation of a Java binary editing tool (JBET), and the assessment of agentlets' tamper resistance. Highlights include our accomplishments in agentlet distribution, challenges encountered in determining re-obfuscation frequency, and future plans concerning de-obfuscation. Key findings suggest that obfuscation can enhance security, though its effectiveness varies based on specific conditions.

Enhancing Mobile Agent Security through Obfuscation Techniques: Final Status Report - slide 1
01 / 10Enhancing Mobile Agent Security through Obfuscation Techniques: Final Status Report
1 / 17

Télécharger la présentation

Enhancing Mobile Agent Security through Obfuscation Techniques: Final Status Report
Une image / un lien ci-dessous est fourni (tel quel) pour télécharger la présentation

Politique de téléchargement : le contenu du site vous est fourni TEL QUEL pour votre information et votre usage personnel ; il ne peut être vendu, concédé sous licence ni partagé sur d’autres sites sans l’accord de son auteur.Le contenu vous est fourni TEL QUEL, pour votre information et votre usage personnel uniquement. Téléchargez la présentation en cliquant sur ce lien. Lors du téléchargement, si vous ne parvenez pas à télécharger une présentation, l’éditeur a peut-être supprimé le fichier de son serveur.Pendant le téléchargement, si vous ne parvenez pas à obtenir une présentation, le fichier a peut-être été supprimé par l’éditeur.

F I N

Plus de contenu associé

Transcription de la présentation
  1. Tom Van Vleck Lee Badger Larry D’Anna Brian Matt Andrew Reisse Self-Protecting Mobile Agents Funded by both OASIS and Active Networks Programs August 2002

  2. Status Report 2000 2001 2002 2003 March 14, 2000 Start Date March 15, 2003 End Date April 30, 2001 Prototype Distributed Agent Generation Tool a a Nov. 15, 2001 Obfuscation Techniques Evaluation Report Jan. 15, 2003 Final Report a Feb. 28, 2001 Policy Specification and Architecture Report a March 15, 2002 Obfuscated Agentlet Prototype Dec. 15, 2002 Distributed, Self-Healing Obfuscated Agentlet Prototype

  3. What We Were Trying To Do • Show that mobile agents can be protected by • Breaking agent into distributed group of agents • Obfuscating the agentlets • Detecting tampering and subversion • Periodic re-obfuscation

  4. Accomplishments • Demonstrated breaking mobile agents into teams of “agentlets” • Built Java binary editing tool (JBET) and obfuscation modules • JBET being adapted to other research

  5. Changes to Approach • How often should we re-obfuscate? • Nobody could say • Estimates of resistance to attack • All informal • Focus on strength of obfuscation

  6. Plans • Now studying de-obfuscation and strength of obfuscation • Report on obfuscation

  7. Work by Others • UVA work: Wang, Knight, et al (+) • Commercial obfuscation vendors • Cloakware (+) • AHPAH Software (-) • InterTrust (+) • Paper by Barak et al: “On the (Im-)Possibility of Obfuscating Software” (-) • Hacker sites (-) • Content Restrictions Management and attacks on it ()

  8. De-Obfuscation Experiments • Wrote JBET module to analyze a “switchified” program • Wasn’t that hard • Used knowledge of obfuscation patterns: we think all obfuscators will have patterns • Static with hints from dynamic • Dynamic versus static • Some static problems may be NP hard in general • Dynamic analysis is easy but may not give general results

  9. Obfuscation Report • “Should I obfuscate my program?” • Yes, using method X • No, doesn’t work • Depends, on factors Y and Z • Reasoning to support this • Theory • Experiment

  10. The End!