Large Language Models for Code Obfuscation Evaluation of the Obfuscation Capabilities of OpenAI's GPT-3.5 on C Source Code

被引:0
|
作者
Kochberger, Patrick [1 ,2 ]
Gramberger, Maximilian [1 ]
Schrittwieser, Sebastian [2 ]
Lawitschka, Caroline [2 ]
Weippl, Edgar R. [3 ]
机构
[1] St Polten Univ Appl Sci, Inst IT Secur Res, St Polten, Austria
[2] Univ Vienna, Res Grp Secur & Privacy, Vienna, Austria
[3] SBA Res, Vienna, Austria
来源
PROCEEDINGS OF THE 20TH INTERNATIONAL CONFERENCE ON SECURITY AND CRYPTOGRAPHY, SECRYPT 2023 | 2023年
基金
奥地利科学基金会;
关键词
Software Protections; Code Obfuscation; Large Language Model; GPT;
D O I
10.5220/0012167000003555
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
This study explores the efficacy of large language models, specifically GPT-3.5, in obfuscating C source code for software protection. We utilized eight distinct obfuscation techniques in tandem with seven representative C code samples to conduct a comprehensive analysis. The evaluation was performed using a Python-based tool we developed, which interfaces with the OpenAI API to access GPT-3.5. Our metrics of evaluation included the correctness and diversity of the obfuscated code, along with the robustness of the resultant protection. While the diversity of the resulting code was found to be commendable, our findings indicate a prevalent issue with the correctness of the obfuscated code and the overall level of protection provided. Consequently, we assert that while promising, the feasibility of deploying large language models for automatic code obfuscation is not yet sufficiently established. This study signifies an important step towards understanding the limitations and potential of AI-based code obfuscation, thereby informing future research in this area.
引用
收藏
页码:7 / 19
页数:13
相关论文
共 5 条
  • [1] Mechanisms for Source Code Obfuscation in C: Novel Techniques and Implementation
    Ahire, Pallavi
    Abraham, Jibi
    2020 INTERNATIONAL CONFERENCE ON EMERGING SMART COMPUTING AND INFORMATICS (ESCI), 2020, : 52 - 59
  • [2] A New Approach to Web Application Security: Utilizing GPT Language Models for Source Code Inspection
    Szabo, Zoltan
    Bilicki, Vilmos
    FUTURE INTERNET, 2023, 15 (10)
  • [3] Requirements Verification Through the Analysis of Source Code by Large Language Models
    Couder, Juan Ortiz
    Gomez, Dawson
    Ochoa, Omar
    SOUTHEASTCON 2024, 2024, : 75 - 80
  • [4] Exploring the Impact of the Output Format on the Evaluation of Large Language Models for Code Translation
    Macedo, Marcos
    Tian, Yuan
    Cogo, Filipe R.
    Adams, Bram
    PROCEEDINGS 2024 IEEE/ACM FIRST INTERNATIONAL CONFERENCE ON AI FOUNDATION MODELS AND SOFTWARE ENGINEERING, FORGE 2024, 2024, : 57 - 68
  • [5] Enhancing Code Security Through Open-Source Large Language Models: A Comparative Study
    Ridley, Norah
    Branca, Enrico
    Kimber, Jadyn
    Stakhanova, Natalia
    FOUNDATIONS AND PRACTICE OF SECURITY, PT I, FPS 2023, 2024, 14551 : 233 - 249