US 8,429,637 B2Granted

System and method for conditional expansion obfuscation

AssigneeApple Inc.

InventorsGideon M. Myles, Tanya Michelle Lattner, Julien Lerouge, Augustin J. Farrugia

Life of this patent

Estimating the term…

Loading patent…

Abstract

Disclosed herein are systems, methods, and computer readable-media for obfuscating code through conditional expansion obfuscation. The method includes identifying a conditional expression in a computer program, identifying a sequence of conditional expressions that is semantically equivalent to the conditional expression, and replacing the conditional expression with the semantically equivalent sequence of conditional expressions. One option replaces each like conditional expression in the computer program with a diverse set of sequences of semantically equivalent conditional expressions. A second option rearranges computer instructions that are to be processed after the sequence of conditional expression is evaluated so that a portion of the instructions is performed before the entire sequence of conditional expressions is evaluated. A third option performs conditional expansion obfuscation of a conditional statement in combination with branch extraction obfuscation.

Claims17

Dependent claims

A method of obfuscating code, the method comprising:

identifying a first boolean statement in a first conditional expression in a computer program, wherein in response to a one or more input values the first boolean statement evaluates to a corresponding first boolean value wherein a first set of instructions is executed only when the first conditional expression evaluates to a first value based at least in part on the first boolean value;
identifying preferences for determining a level of obfuscation to be applied to the system
selecting from a conditional expression library, based on said preferences, a first sequence of two or more boolean statements that is semantically equivalent to the first boolean statement, wherein the sequence of two or more boolean statements when executed together evaluate to the corresponding first boolean value in response to the one or more input values, and further wherein each boolean statement in the first sequence of two or more boolean statements differs from the first boolean statement;
replacing the first boolean statement with the semantically equivalent first sequence of two or more boolean statements;
selecting a first subset of the first set of instructions comprising less than all of the first set of instructions;
and
reordering the instructions such that the first subset of the first set of instructions to execute before completing execution of the first sequence of two or more boolean statements and remaining instructions in the first set of instructions execute after completing execution of the first sequence of two or more boolean statements.

4 more elements

A system for obfuscating code, the system comprising:

a processor;
a computer readable storage medium storing instructions for controlling the processor to perform steps comprising:
identifying a first boolean statement in a first conditional expression in a computer program, wherein in response to a one or more input values the first boolean statement evaluates to a corresponding first boolean value, wherein a first set of instructions is executed only when the first conditional expression evaluates to a first value based at least in part on the first boolean value;
identifying preferences for determining a level of obfuscation to be applied to the system;
selecting from a conditional expression library, based on said preferences, a first sequence of two or more boolean statements that is semantically equivalent to the first boolean statement, wherein the first sequence of two or more boolean statements when executed together evaluate to the corresponding first boolean value in response to the one or more input values, and further wherein each boolean statement in the first sequence of two or more boolean statements differs from the first boolean statement;
replacing the first boolean statement with the semantically equivalent first sequence of two or more boolean statements;
selecting a first subset of the first set of instructions comprising less than all of the first set of instructions;
and
reordering the instructions such that the first subset of the first set of instructions to execute before completing execution of the first sequence of two or more boolean statements and remaining instructions in the first set of instructions execute after completing execution of the first sequence of two or more boolean statements.

6 more elements

A non-transitory computer-readable medium storing a computer program having instructions for obfuscating code, the instructions comprising:

identifying a first boolean statement in a first conditional expression in a computer program, wherein in response to a one or more input values the first boolean expression evaluates to a corresponding first boolean value, wherein a first set of instructions is executed only when the first conditional expression evaluates to a first value based at least in part on the first boolean value;
identifying preferences for determining a level of obfuscation to be applied to the system;
selecting from a conditional expression library, based on said preferences, a first sequence of two or more boolean statements that is semantically equivalent to the first boolean statement, wherein the first sequence of two or more boolean statements when executed together evaluate to the corresponding first boolean value in response to the one or more input values, and further wherein each boolean statement in the first sequence of two or more boolean statements differs from the first boolean statement;
replacing the first boolean statement with the semantically equivalent first sequence of two or more boolean statements;
selecting a first subset of the first set of instructions comprising less than all of the first set of instructions;
and
reordering the instructions such that the first subset of the first set of instructions to execute before completing execution of the first sequence of two or more boolean statements and remaining instructions in the first set of instructions execute after completing execution of the first sequence of two or more boolean statements.

4 more elements

Dependencies are inferred from the claim text.