Software Protection Research Articles

Application of Encryption Lock in the Power Simulation Training Software Information Protection

With the level of China's power information technology increased, any information security problem appear in power system are likely to endanger the safe operation of power grid. USB dongle is a popular authentication security tool which can effectively prevent the illegal use of software. In this paper, use electrical simulation training software as an example, apply encryption lock as an important tool for the security protection of electric power simulation training software, introduce the principle and role in information security protection of encryption lock in detail.

A Software Protection Method Based on Computer Fingerprint and Asymmetric Encryption

Software protection is an important research area in computer field. Combined with the traditional asymmetric encryption algorithm which provides the measures of protection, computer fingerprint was employed to identify the protection object. This novel software protection method is called AEA-CF, which means asymmetric encryption algorithm based on computer fingerprint. The computers used AEA-CF should be running on Internet so that the authentication information could be provided by server. The experiments show that this method could protect software effectively.

Truly-Protect: An Efficient VM-Based Software Protection

We present Truly-Protect that is a software protection method. Previously published protection methods relied solely on obscurity. Rolles proposed a general approach for breaking systems that are based on obscurity. We show that, under certain assumptions, Truly-Protect is resistant not only to Rolles' attack but also to any other attacks that do not violate the assumptions. Truly-Protect is based on a virtual machine that enables us to execute encrypted programs. Truly-Protect can serve as a platform for preventing software piracy of obtaining unlicensed copies. Truly-Protect by itself is not a digital rights management system but can form a basis for such a system. We discuss several scenarios and implementations and validate the performance penalty of our protection. A preliminary version of this paper appeared in the 5th International Conference on Network and System Security (NSS2011). It was extended by expanding the system's description, adding more efficient parallel implementation, just-in-time decryption, and a comprehensive performance analysis. It also contains all the necessary proofs.

Novel Secure Code Encryption Techniques Using Crypto Based Indexed Table for Highly Secured Software

Software security has become one of the active areas of research due to various cyber threats and attacks that can be very dangerous. The main goals of software protection are Intellectual property protection, Protection beside function investigation in mobile environments, Protection beside illegal copy and use of software. Software security is dependent on both security code and software protection. Various techniques have been developed to deal with the software threats and attacks. However, the available software protection approaches in the literature do not offer trustworthy security in all the scenarios. In recent years, cryptographic techniques are observed to be very efficient in dealing with a number of software threats and attacks. Code encryption has received much attention in the field of software security. This paper proposes novel software protection code encryption schemes based on the index table. This approach uses three novel and efficient encryption techniques namely quasigroup encryption, quasi group encryption with transformation and KIST approach

Research on Code Obfuscation Based on Maze Protection Technology

In view of the increasingly serious software protection problem, the software protection technology based on code obfuscation is analyzed and researched, and a new software protection system, maze protection is designed and realized. With the principle of maze encryption, this program insert a large number of the complex judgments code between function entry and exit, which change the execution order, enhancing the ability of software protection. On this basis, Anti-debug techniques incorporated into the maze protection, which against the mainstream anti-debugger, increasing the advantage of high anti-reversing, tamper-proof and anti-cracking. Experimental analysis has proved that this maze protection technology was better than other virtual machine protection technologies.

A software protection framework for mobile devices

The software protection technology is the main component of modern software security technology. Generally, confusion and encryption methods are using in software protection technology to provide traditional desktop applications. But applications based on mobile devices are also faces with threats such as piracy and tampering. The security problem in existing applications for mobile devices will do far more harm to users than traditional virus, but there is no effective software protection security framework for them. A software application framework for mobile devices is proposed in this paper, and the white box decryption algorithm involved is improved. And it is analyzed in this paper the performance and security of the framework proposed, the operational efficiency of the improved encryption algorithm is verified.

Software and Copyright Exhaustion: A Proposal to Amend § 117 and Restore Balance to the Copyright System

Copyright law exists in a balance. On the one end, copyright grants authors a set of exclusive rights in an effort to incentivize them to create. On the other, the public gains needed access to a wider range of works and information after these new works are created and published. Disrupting the balance diminishes the central purpose of copyright – to promote the progress of science and the useful arts. Copyright’s protection of digital software and computer programs fails to meet this balance by allowing copyright owners to avoid “selling” their work and instead “license” the work. This Article argues that that § 117 of the Copyright Act, which addresses the rights of owners of copyright protected software, insufficiently protects end users. The best course of action, therefore, is to amend the language of § 117 to address the prevalent method of distribution of copyrighted material, placing emphasis on the rights granted to end users. This is possible without diminishing a copyright owner’s ability to price discriminate, and will result in restoring the essential balance to copyright law.

On Best-Possible Obfuscation

An obfuscator is a compiler that transforms any program (which we will view in this work as a boolean circuit) into an obfuscated program (also a circuit) that has the same input-output functionality as the original program, but is unintelligible. Obfuscation has applications for cryptography and for software protection. Barak et al. (CRYPTO 2001, pp. 1---18, 2001) initiated a theoretical study of obfuscation, which focused on black-box obfuscation, where the obfuscated circuit should leak no information except for its (black-box) input-output functionality. A family of functionalities that cannot be obfuscated was demonstrated. Subsequent research has showed further negative results as well as positive results for obfuscating very specific families of circuits, all with respect to black box obfuscation. This work is a study of a new notion of obfuscation, which we call best-possible obfuscation. Best possible obfuscation makes the relaxed requirement that the obfuscated program leaks as little information as any other program with the same functionality (and of similar size). In particular, this definition allows the program to leak information that cannot be obtained from a black box. Best-possible obfuscation guarantees that any information that is not hidden by the obfuscated program is also not hidden by any other similar-size program computing the same functionality, and thus the obfuscation is (literally) the best possible. In this work we study best-possible obfuscation and its relationship to previously studied definitions. Our main results are: (1) A separation between black-box and best-possible obfuscation. We show a natural obfuscation task that can be achieved under the best-possible definition, but cannot be achieved under the black-box definition. (2) A hardness result for best-possible obfuscation, showing that strong (information-theoretic) best-possible obfuscation implies a collapse in the Polynomial-Time Hierarchy. (3) An impossibility result for efficient best-possible (and black-box) obfuscation in the presence of random oracles. This impossibility result uses a random oracle to construct hard-to-obfuscate circuits, and thus it does not imply impossibility in the standard model.

Some reflections on the duality of regime for software protection in the European Union

Although the framework for protection of computer programs has been established in the European Union more than two decades ago, it has not undergone any major changes. Opinions of Advocate General Yves Bot have convinced the Court to advance the concept of the plurality of copyright regimes applicable to software: source code, object code and documentation would be protected under the Software Directive, whereas interfaces, programming languages, data formats and software manuals are dealt with as literary works under the InfoSoc Directive. In SAS Institute v WPL, the Court also ruled that copyright in a computer program cannot be infringed where the lawful acquirer of the license neither decompiled the object code nor copied the source code of the computer program, but merely studied, observed and tested that program in order to reproduce its functionality in a second program. This ruling paves the way and acknowledges the reverse engineering efforts on the Old Continent.

Containing piracy with product pricing, updating and protection investments

We consider a monopolistic producer offering software that is updated periodically, but, by the end of one period, a pirated version is available at a transaction cost. This presents the consumers, who are different in terms of their willingness to pay for the original compared to the pirated version, with possible strategies for either buying a new product or pirating it. We address pricing and protection investment strategies to regain the profits affected by the piracy. In particular, we find that even when the transaction cost is exogenous, the producer does not necessarily want to fully price out the piracy. The decisive factor in such a case is the level of product newness relative to the transaction cost. If the producer is able to achieve high newness for the updated product relative to the transaction cost, then a high retail price ensures that he will gain the largest profit possible even though some of the demand will be lost due to piracy. On the other hand, when the transaction cost is endogenous, the producer may have two alternatives, in terms of profit, for dealing with the piracy—pricing the software out or investing heavily in software protection. As newness levels rise, the option of pricing out the piracy becomes increasingly preferable.

A Relook at Sui Generis Software Protection Through the Prism of Multi—Licensing

AbstractDebate has been raging since the 1960s regarding intellectual property and software protection, primarily focusing on its accommodation within existing traditional intellectual property structures or sui generis approaches. Eventually, software protection was accommodated within a range of intellectual property rights, contract law and technological measures. However, several occurrences in the past three decades highlight developing fissures in the mode of software protection; certain other developments highlight increasing acceptance and ease in implementing sui generis protection. Correspondingly, the open source software licensing structure has emerged with a novel and extremely successful adaptation of intellectual property law. It has led to emergence of the multi‐licensing scheme, where software is licensed under two or more licensing structures—one of which is open source and the other “proprietary.” The multi‐licensing scheme reveals several similarities to various sui generis software protection proposals. Perhaps this is an indication of and validation that the industry has evolved to such an extent that there is a need to rethink the mode of software protection. Based on this premise, this article attempts to develop a proposal for a sui generis Model Software Law.

MAC함수와 동적 링크키를 이용한 소프트웨어 변조 방지 기법

ABSTRACT In order to prevent tampering and reverse engineering of execut ive code, this paper propose a new tamper resistant software mechanism. This paper presents a cryptographic MAC function and a relationship which has its security level derived by the importance of code block instead of by merely getting the encry ption and decryption key from the previous block. In this paper, we propose a cryptographic MAC function which generates a dynamic MAC function key instead of the hash function as written in many other papers. In addition, we also propose a relationships having high, medium and low security levels. If any block is determined to have a high security level then that block will be encrypted by the key generated by the related medium security level block. The low security block will be untouched due to efficiency considerations. The MAC function having this dynamic key and block relationship will make analyz ing executive code more difficult.Keywords: application program protection, reverse engineering, software protection, code obfuscation접수일(2012년 8월 7일), 수정일(1차: 2012년 10월 12일, 2차: 2012년 12월 24일), 게재확정일(2012년 12월 24일)* 본 연구는 방위사업청과 국방과학연구소의 지원으로 수행되었습니다.†주저자, magogos@hanmail.net‡교신저자, donghlee@korea.ac.kr

Piracy in a two-sided software market

This paper studies the impact of software piracy in a two-sided-market setting. Software platforms attract developers and users to maximize their profits. The equilibrium price structure is affected by piracy: license fees to developers are higher with more software protection but the impact on user prices is ambiguous. A conflict between platforms and software developers over software protection may arise: whereas one side benefits from better protection, the other party loses out. Under platform compatibility, this conflict is no longer present.

Safety Testing Method Analysis of Computer Software

Along with the computer network application becomes more popular, along with our country Internet market becoming stronger, more and more individuals or enterprises to commercial activities into the electronic commerce platform, so the computer software security has become increasingly important. Therefore, to strengthen the security of computer software protection research is very necessary, and guarantee the software safety is one of the effective means of software security hidden trouble detection. This paper will discuss the computer software system in safety detection method. Computer software security testing technology is existing computer software safety based, effective recognition computer software security problems in.

Legal issues for chem-bioinformatics models

Chem-Bioinformatic models connect the chemical structure of drugs and/or targets (protein, gen, RNA, microorganism, tissue, disease...) with drug biological activity over this target. On the other hand, a systematic judicial framework is needed to provide appropriate and relevant guidance for addressing various computing techniques as applied to scientific research in biosciences frontiers. This article reviews both: the use of the predictions made with models for regulatory purposes and how to protect (in legal terms) the models of molecular systems per se, and the software used to seek them. First we review: i) models as a tool for regulatory purposes, ii) Organizations Involved with Validation of models, iii) Regulatory Guidelines and Documents for models, iv) Models for Human Health and Environmental Endpoint, and v) Difficulties to Validation of models, and other issues. Next, we focused on the legal protection of models and software; including: a short summary of topics, and methods for legal protection of computer software. We close the review with a section that treats the taxes in software use.

Patents of bio-active compounds based on computer-aided drug discovery techniques

In recent times, there has been an increased use of Computer-Aided Drug Discovery (CADD) techniques in Medicinal Chemistry as auxiliary tools in drug discovery. Whilst the ultimate goal of Medicinal Chemistry research is for the discovery of new drug candidates, a secondary yet important outcome that results is in the creation of new computational tools. This process is often accompanied by a lack of understanding of the legal aspects related to software and model use, that is, the copyright protection of new medicinal chemistry software and software-mediated discovered products. In the center of picture, which lies in the frontiers of legal, chemistry, and biosciences, we found computational modeling-based drug discovery patents. This article aims to review prominent cases of patents of bio-active organic compounds that involved/protect also computational techniques. We put special emphasis on patents based on Quantitative Structure-Activity Relationships (QSAR) models but we include other techniques too. An overview of relevant international issues on drug patenting is also presented.

Intellectual Property Systems in Software

Support for research and development in information technology is considered today as critical by most governments in the industrially advanced countries. Traditionally the way of stimulating research has been to ensure to the investor the appropriability of the returns generated. Such appropriability is typically implemented by means of the Intellectual Property Rigths. Nevertheless the protection of such rights is heterogeneous worldwide. Today two different legal systems for the protection of software coexist: the system of patents and the system of author's copyrights. This paper explains these two main systems of ‘intellectual property’ to provide legal protection to a software, including the licenses to transfer rights on software. The end of the paper presents the most recent trends of the EU government to replace the current European software protection system, including a discussion onf the software patents and the legal initiatives on the subject. In addition, legal issues linked with new ways in software comercialization are presented.

Configurable Obsolescence Mitigation Methodologies

The methodologies used to mitigate obsolescence have changed very little since they were initially proposed in the early obsolescence management documents and specifications. However, recently there has been a noticeable shift in the techniques which need to be used. This is partly due to the economic climate under which we are operating today. But other factors such as the stability in the defense threat are also coming into effect. The through life plans no long assume that mid-life upgrades and technology insertions are part of the process. Also, as the consumer market continues to reduce its product life spans, the high reliability market is definitely moving the other way. Whether this is actually a new policy or just a reflection of what has been happening for some time now with repeated life extensions remains to be debated.The result of these changes in through life policies on the obsolescence community has been quite profound. The emphasis has most definitely moved away from providing a low cost solution to “bridge” the time-span until the next planned upgrade or technology insertion. The solution itself today now needs to be well protected with regard to obsolescence, not necessarily with components which will last forever but by using design techniques which recognise the inevitability of obsolescence.Of course the cost of the solution is an important factor, however this should now be a through life cost. The principles of software protection, reductions in regression testing and re-qualification remain a corner stone in providing a cost effective solution. However, today more emphasis must be given to the type of solution that is chosen, if escalating expenditure is not to be occurred in the future to recover the situation again and again.This paper will examine how Configurable Obsolescence Mitigation Methodologies can be used to provide not only a cost effective solution, but one which meets the new product life philosophies. Using practical examples to illustrate methodology, it will show how these techniques can be integrated into both obsolescence and through life management plans, not just during obsolescence mitigation but at the initial design phase. It will show that the techniques are a legitimate substitution to technology insertion and planned up-grades when pro-active obsolescence management plans are produced.

Technique of Code Obfuscation Based on Class Splitting

The security of software is threatened by piracy, tampering and reverse engineering. Attackers attempt to get important algorithms and sensitive data of software by static analysis or reverse engineering. Software protection becomes an important problem. The algorithm of code obfuscation based on class splitting is proposed that uses of obfuscation technology. The definition of class splitting and realization on algorithm are described. At the same time, the performance on algorithm is analyzed. The obfuscation method enhances the degree of complication about program and static analysis becomes more difficult. The algorithm is applicable to object-oriented program with class structure.

Technique of Code Obfuscation Based on Class Structure

Software protection technology is necessary for software security and property right of software. The algorithm of code obfuscation based on class is proposed that uses of obfuscation technology. The overall architecture of the system is hidden by changing the class diagram for class aggregation, and the algorithm of class aggregation can be used to design class hierarchy in object-oriented program. It makes static analysis difficult while preserving function of program. The interfaces replace original classes to achieve reference in order to implement type hidden, and automatic analysis becomes more difficult.