Decrypted data detection algorithm based on dynamic dataflow analysis

被引:0
作者
Zhang Puhan [1 ]
Wu Jianxiong [1 ]
Wang Xin [1 ]
Wu Zehui [2 ]
机构
[1] China Informat Technol Secur Evaluat Ctr, Beijing, Peoples R China
[2] Zhengzhou Informat Sci & Technol Inst, Zhengzhou, Peoples R China
来源
2014 INTERNATIONAL CONFERENCE ON COMPUTER, INFORMATION AND TELECOMMUNICATION SYSTEMS (CITS) | 2014年
基金
国家高技术研究发展计划(863计划); 中国国家自然科学基金;
关键词
Cryptographic; Dataflow analysis; Decrypted memory; Taint analysis;
D O I
暂无
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Cryptographic algorithm detection has received a lot of attentions in these days, whereas the method to detect decrypted data remains further research. A decrypted memory detection method using dynamic dataflow analysis is proposed in this paper. Based on the intuition that decrypted data is generated in the cryptographic function and the unique feature of decrypted data, by analyzing the parameter sets of cryptographic function, we propose a model based on the input and output of cryptographic function. Experimental results demonstrate that our approach can effectively detect decrypted memory.
引用
收藏
页数:4
相关论文
共 9 条
[1]  
Bruening Derek, 2004, Efficient, Transparent, and Comprehensive Runtime Code Manipulation
[2]  
Caballero J., 2009, P 16 ACM C COMP COMM
[3]  
Caballero J., 2010, P 17 ACM C COMP COMM
[4]  
Grobert Felix, 2010, AUTOMATIC IDENTIFCAT
[5]  
Harvey I., 2001, CIPHER HUNTING FIND
[6]  
Tsankov P., 2012, P 7 INT WORKSH AUT S
[7]  
Wang T., 2010, P 31 IEEE S SEC PRIV
[8]  
Wang Zhi, 2008, REFORMAT AUTOMATIC R
[9]  
Zhao Ruoxu, 2011, DETECTION ANAL CRYPT