虚拟黑盒安全的程序混淆:模型、进展与挑战

发布时间：2018-05-23 13:50

本文选题：程序混淆 + 虚拟黑盒　；参考：《计算机学报》2017年12期

【摘要】：在密码复杂性安全级别上实现程序安全保护方法,主要有两种:函数加密和程序混淆.程序混淆(program obfuscation)是一个编译器,它可将一个程序(布尔表达的电路)转化为可执行的混淆化程序,混淆后的程序与原始程序在相同输入情况下达到相同输出功能,但无法从混淆程序中获得有关原始程序或电路的任何有用信息.程序混淆使软件代码逆项工程在密码学上是可证明困难的,可用于软件产权保护、安全外包计算以及敏感代理操作等场合,也可实现密码学领域中的重加密、不可否认加密以及对称加密转换为公钥加密等应用.目前程序混淆已受到研究人员的广泛重视,然而Barak等(Eurocrypt’01)已证明对一般电路的理想化黑盒安全是不可能的.程序混淆设计要么针对某些具体函数电路,如点函数、多点函数、超平面关系函数以及重加密功能函数等,以达到虚拟黑盒安全的构造,要么弱化安全要求获得实用性可证明安全的程序混淆方案.鉴于程序混淆在理论研究与实际应用上的重要意义,该文对程序混淆技术的系统模型、安全性、方案设计以及性能等作综述性研究和比较分析,从混淆函数电路的可能性和不可能性角度作了归纳,并对典型的函数电路混淆作了描述和探讨.对VBB安全混淆、VGB安全混淆、最可能混淆、可提取混淆以及不可区分混淆等安全模型进行了分析探讨.最后对密码技术实现的混淆在性能上进行定义和归纳,对当前方案作比较分析,并对今后的研究方向作了展望.
[Abstract]:There are two kinds of methods to protect program security on the level of cryptographic complexity: function encryption and program confusion. Program obfuscationis a compiler that converts a program (a Boolean expressed circuit) into an executable obfuscation program that achieves the same output function as the original program in the same input case. However, no useful information about the original program or circuit can be obtained from the obfuscation program. Program confusion makes the inverse engineering of software code difficult to prove in cryptography. It can be used in software property right protection, security outsourced calculation, sensitive agent operation and so on, and it can also realize reencryption in cryptography field. Undeniable encryption and symmetric encryption into public key encryption and other applications. At present, the confusion of program has been paid much attention by researchers. However, Barak et al. Eurocrypt01has proved that the idealized black box security for general circuits is impossible. The program confusion design is either aimed at some specific function circuits, such as point function, multipoint function, hyperplane relation function and reencryption function, in order to achieve the secure construction of virtual black box. Or weaken the security requirements to obtain practicability can prove the security of the program confusion scheme. In view of the importance of program confusion in theoretical research and practical application, this paper makes a comprehensive study and comparative analysis on the system model, security, scheme design and performance of program confusion technology. In this paper, the possibility and impossibility of confusing functional circuits are summarized, and the typical confusion of functional circuits is described and discussed. The security models such as VBB security confusion, most likely confusion, extractable confusion and indistinguishable confusion are analyzed and discussed. Finally, the confusion of cryptography is defined and summarized, the current scheme is compared and analyzed, and the future research direction is prospected.
【作者单位】：湖北工业大学计算机学院;伍伦贡大学计算与信息技术学院;
【基金】：国家自然科学基金(61672010,61370224,61702168) 湖北工业大学高层次人才基金(2016-1)资助~~
【分类号】：TP309

【相似文献】