Abstract:Bytecode obfuscation is an essential technique for protecting intellectual property and defending against Man-At-The-End (MATE) attacks to Java/Android applications. Several bytecode obfuscators have been developed for modifying or refactoring Java bytecode (.class) so that it becomes hard to understand but remains fully functional. These obfuscators usually integrate a variety of obfuscation rules, allowing obfuscation algorithms to be combined and enforced on the applications. Meanwhile, it still remains a difficulty: Given a bytecode file f, which obfuscation rule(s) need to be applied such that f can get obfuscated sufficiently?This paper presents ORChooser (Obfuscation Rule Chooser), an adaptive approach to recommending a small number obfuscation rules for Java bytecode obfuscators. The key idea of ORChooser is, given a bytecode obfuscator, to (1) randomly select/unselect obfuscation rules for the obfuscator, and (2) calculate the obfuscation distance between the bytecode before and after obfuscation. Furthermore, ORChooser takes an iterative process to adaptively obfuscate the bytecode file f such that the obfuscated code is far away from f.We have implemented ORChooser and evaluated it on a state-of-the-art bytecode obfuscators: Android R8. The evaluation results clearly show the strength of ORChooser. In particular, within 5 iterations, ORChooser chose about 25% of obfuscation rules for R8, reducing more than 29% of the bytecode size. The similarity between the bytecode files before and after obfuscation is less than 27%, indicating that the ORChooser-supported obfuscators have obfuscated bytecode sufficiently and reduce its comprehensibility significantly.

A parameterized flattening control flow based obfuscation algorithm with opaque predicate for reduplicate obfuscation

Parameterized Decomposition Tree-Based Obfuscation Method with Double Flattening Control Flow

Control Flow Obfuscation Scheme for LLVM Intermediate Languages

Obfuscating algorithm based on congruence equation and improved fiat control flow

Manufacturing Cheap, Resilient, and Stealthy Opaque Constructs.

A Method and Implementation of Control Flow Obfuscation Using SEH

Control Flow Obfuscation with Information Flow Tracking

Manufacturing Resilient Bi-Opaque Predicates Against Symbolic Execution

Compiling Method for Obfuscation Technology Based on Crossing Control-Flow

IOLLVM: enhance version of OLLVM

Obfuscation using Encryption

A Control Flow Obfuscation Method for Android Applications

A Logic Obfuscation Attack Method Based on Gate-Level Information Flow Tracing Techniques

Manufacturing opaque predicates in distributed systems for code obfuscation.

Reverse Technique Of Malicious Obfuscated Binary Code Based On Control Flow Graph

Exploring Compiler Optimization Space for Control Flow Obfuscation

Control-flow Flattening Preserves the Constant-Time Policy (Extended Version)

Binary Obfuscation Based Reassemble

Translingual Obfuscation

Pinpointing and Hiding Surprising Fragments in an Obfuscated Program.

An Adaptive Approach To Recommending Obfuscation Rules For Java Bytecode Obfuscators