Collberg's Software Obfuscation Research



To ensure platform independence, mobile programs are distributed in forms that are isomorphic to the original source code. Such codes are easy to decompile, and hence they increase the risk of malicious reverse engineering attacks.

Several methods have been proposed to alleviate this situation. The highest level of protection is achieved with cryptographic solutions, but, unfortunately, this requires dedicated hardware with integrated decryption and execution units.

A more modest level of protection is achieved through obfuscation. An obfuscator is a tool which -- through the application of code transformations -- converts a program into an equivalent one that is more difficult to reverse engineer. The advantage of this method is that it runs on standard hardware and without any changes to virtual machines or available interpreters.


Links to obfuscation tools, papers, and other resources can be found on the Obfuscation and Sofware Watermarking Page .


Publications
Christian S. Collberg ,
Clark Thomborson
Watermarking, Tamper-Proofing, and Obfuscation - Tools for Software Protection February, 2000
University of Arizona Technical Report 2000-03,
University of Auckland Technical Report #170.
Department of Computer Science, The University of Arizona,
Department of Computer Science, The University of Auckland, New Zealand.
15 pages
Christian S. Collberg ,
Clark Thomborson ,
Douglas Low
Breaking Abstractions and Unstructuring Data Structures 14-16 May, 1998
IEEE International Conference on Computer Languages (ICCL'98) Chicago, IL 20 pages
Christian S. Collberg ,
Clark Thomborson ,
Douglas Low
Manufacturing Cheap, Resilient, and Stealthy Opaque Constructs January, 1998
ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL98) San Diego, California 14 pages
ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL99) San Antonio, Texas 14 pages
Christian S. Collberg ,
Clark Thomborson ,
Douglas Low
A Taxonomy of Obfuscating Transformations July, 1997
Technical Report #148 Department of Computer Science, The University of Auckland 36 pages
Christian S. Collberg ,
Clark Thomborson ,
Douglas Low
OBFUSCATION TECHNIQUES FOR ENHANCING SOFTWARE SECURITY Assignee: INTERTRUST, INC., Sunnyvale, CA 9 June 1997
New Zealand Patent Application #328057, WO 99/01815, PCT/US98/12017