Proceedings of ISP RAS


Building obfuscation compiler based on LLVM infrastructure.

Kurmangaleev S.F., Korchagin V.P., Savchenko V.V., Sargsyan S.S.

Abstract

The paper describes the obfuscating transformations, which were implemented while developing an LLVM-based obfuscating compiler in ISP RAS. The proposed transformations are based on well-known obfuscation algorithms and are specifically improved to resist better to static analysis deobfuscation techniques. The application performance decrease estimation and the increase of application memory consumption estimation are presented. Also, the possibility of source code information recovery is estimated. The implemented obfuscating transformations can be applied together to the given application to provide the strong protection from the static analysis deobfuscation attacks.

Keywords

LLVM, obfuscation

Edition

Proceedings of the Institute for System Programming, vol. 23, 2012, pp. 77-92.

ISSN 2220-6426 (Online), ISSN 2079-8156 (Print).

DOI: 10.15514/ISPRAS-2012-23-5

Full text of the paper in pdf (in Russian) Back to the contents of the volume