loading...
A Generic Attack on Checksumming-Based Software Tamper Resistance
Oakland, California May 08-May 11
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/SP.2005.22005 IEEE Symposium on Security and P ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Glenn Wurster, Carleton University, Canada
P.C. van Oorschot, Carleton University, Canada
Anil Somayaji, Carleton University, Canada
Self-checking software tamper resistance mechanisms employing checksums, including advanced systems as recently proposed by Chang and Atallah (2002) and Horne et al. (2002), have been promoted as an alternative to other software integrity verification techniques. Appealing aspects include the promise of being able to verify the integrity of software independent of the external support environment, as well as the ability to automatically integrate checksumming code during program compilation or linking. In this paper, we show that the rich functionality of many modern processors, including UltraSparc and x86-compatible processors, facilitates automated attacks which defeat such checksumming by self-checking programs.
Citation:
Glenn Wurster, P.C. van Oorschot, Anil Somayaji, "A Generic Attack on Checksumming-Based Software Tamper Resistance," sp, pp.127-138, 2005 IEEE Symposium on Security and Privacy (S&P'05), 2005
Usage of this product signifies your acceptance of the Terms of Use.