Tailored Source Code Transformations to Synthesize Computationally Diverse Program Variants

by Benoit Baudry, Simon Allier and Martin Monperrus
Abstract: The predictability of program execution provides attackers a rich source of knowledge who can exploit it to spy or remotely control the program. Moving target defense ad- dresses this issue by constantly switching between many diverse variants of a program, which reduces the certainty that an attacker can have about the program execution. The ef- fectiveness of this approach relies on the availability of a large number of software variants that exhibit dierent ex- ecutions. However, current approaches rely on the natural diversity provided by o-the-shelf components, which is very limited. In this paper, we explore the automatic synthe- sis of large sets of program variants, called sosies. Sosies provide the same expected functionality as the original pro- gram, while exhibiting dierent executions. They are said to be computationally diverse. This work addresses two objectives: comparing dierent transformations for increasing the likelihood of sosie synthe- sis (densifying the search space for sosies); demonstrating computation diversity in synthesized sosies. We synthesized 30 184 sosies in total, for 9 large, real-world, open source ap- plications. For all these programs we identied one type of program analysis that systematically increases the density of sosies; we measured computation diversity for sosies of 3 programs and found diversity in method calls or data in more than 40% of sosies. This is a step towards controlled massive unpredictability of software.
 View PDF
Open-access (on arXiv.org)
Publisher version (via DOI)
Citations: [citations]
Other publications of Martin Monperrus

Cite it:

Benoit Baudry, Simon Allier and Martin Monperrus, "Tailored Source Code Transformations to Synthesize Computationally Diverse Program Variants", In Proceedings of the International Symposium on Software Testing and Analysis, 2014.
https://doi.org/10.1145/2610384.2610415
Tailored Source Code Transformations to Synthesize Computationally Diverse Program Variants
http://arxiv.org/pdf/1401.7635
[Tailored Source Code Transformations to Synthesize Computationally Diverse Program Variants](http://arxiv.org/pdf/1401.7635) ([doi:10.1145/2610384.2610415](https://doi.org/10.1145/2610384.2610415))
\href{http://arxiv.org/pdf/1401.7635}{Tailored Source Code Transformations to Synthesize Computationally Diverse Program Variants} % \cite{1401.7635}

Bibtex Entry:

@inproceedings{1401.7635,
 title = {Tailored Source Code Transformations to Synthesize Computationally Diverse Program Variants},
 booktitle = {Proceedings of the International Symposium on Software Testing and
  Analysis},
 year = {2014},
 doi = {10.1145/2610384.2610415},
 author = {Benoit Baudry and Simon Allier and Martin Monperrus},
 url = {http://arxiv.org/pdf/1401.7635},
}
Powered by bibtexbrowser
Tagged as: