loading
Papers

Research.Publish.Connect.

Paper

Authors: Erik Sonnleitner ; Marc Kurz and Alexander Palmanshofer

Affiliation: Department for Mobility & Energy, University of Applied Sciences Upper Austria, Campus Hagenberg and Austria

ISBN: 978-989-758-378-0

Keyword(s): Code Security, Credential Storage, Steganography, Information Hiding.

Related Ontology Subjects/Areas/Topics: Data Engineering ; Data Management and Quality ; Digital Rights Management ; Information and Systems Security ; Information Assurance ; Information Hiding ; Security in Information Systems ; Security Information Systems Architecture and Design and Security Patterns ; Software Security

Abstract: A common problem in software development is how to handle sensitive information required for appropriate process execution, especially when requesting user input like passwords or -phrases for proper encryption is not applicable due to I/O, UI or UX limitations. This often leads to such information being either stored directly in the source code of the application, or as plaintext in a separate file. We therefore propose an experimental scheme for dynamically recovering arbitrary chunks of information based on the integrity of the text-segment of a running process, without the information being easily extractible from either an on-disk binary, memory dump or the memory map of a running process. Implementing an algorithm we call offset vectoring, this method can help dealing with sensitive information and enhancing the resistance against attacks which aim at extracting such data as well as attempts towards modifying an application, e.g. for the purposes of cracking software.

PDF ImageFull Text

Download
CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 18.205.60.226

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Sonnleitner, E.; Kurz, M. and Palmanshofer, A. (2019). Indirect Data Representation Via Offset Vectoring: A Code-integrity-driven In-memory Data Regeneration Scheme.In Proceedings of the 16th International Joint Conference on e-Business and Telecommunications - Volume 2: SECRYPT, ISBN 978-989-758-378-0, pages 333-340. DOI: 10.5220/0007786703330340

@conference{secrypt19,
author={Erik Sonnleitner. and Marc Kurz. and Alexander Palmanshofer.},
title={Indirect Data Representation Via Offset Vectoring: A Code-integrity-driven In-memory Data Regeneration Scheme},
booktitle={Proceedings of the 16th International Joint Conference on e-Business and Telecommunications - Volume 2: SECRYPT,},
year={2019},
pages={333-340},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0007786703330340},
isbn={978-989-758-378-0},
}

TY - CONF

JO - Proceedings of the 16th International Joint Conference on e-Business and Telecommunications - Volume 2: SECRYPT,
TI - Indirect Data Representation Via Offset Vectoring: A Code-integrity-driven In-memory Data Regeneration Scheme
SN - 978-989-758-378-0
AU - Sonnleitner, E.
AU - Kurz, M.
AU - Palmanshofer, A.
PY - 2019
SP - 333
EP - 340
DO - 10.5220/0007786703330340

Login or register to post comments.

Comments on this Paper: Be the first to review this paper.