Diversification and Obfuscation Techniques for Software Security: a Systematic Literature Review
Hosseinzadeh,Shohreh; Rauti,Sampsa; Laurén,Samuel; Mäkelä,Jari Matti; Holvitie,Johannes; Hyrynsalmi,Sami; Leppänen,Ville (2018-12)
12 / 2018
This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited
Julkaisun pysyvä osoite on
Abstract Context: Diversification and obfuscation are promising techniques for securing software and protecting computers from harmful malware. The goal of these techniques is not removing the security holes, but making it difficult for the attacker to exploit security vulnerabilities and perform successful attacks. Objective: There is an increasing body of research on the use of diversification and obfuscation techniques for improving software security; however, the overall view is scattered and the terminology is unstructured. Therefore, a coherent review gives a clear statement of state-of-the-art, normalizes the ongoing discussion and provides baselines for future research. Method: In this paper, systematic literature review is used as the method of the study to select the studies that discuss diversification/obfuscation techniques for improving software security. We present the process of data collection, analysis of data, and report the results. Results: As the result of the systematic search, we collected 357 articles relevant to the topic of our interest, published between the years 1993 and 2017. We studied the collected articles, analyzed the extracted data from them, presented classification of the data, and enlightened the research gaps. Conclusion: The two techniques have been extensively used for various security purposes and impeding various types of security attacks. There exist many different techniques to obfuscate/diversify programs, each of which targets different parts of the programs and is applied at different phases of software development life-cycle. Moreover, we pinpoint the research gaps in this field, for instance that there are still various execution environments that could benefit from these two techniques, including cloud computing, Internet of Things (IoT), and trusted computing. We also present some potential ideas on applying the techniques on the discussed environments.
- TUNICRIS-julkaisut 
Näytetään aineisto, joilla on samankaltaisia nimekkeitä, tekijöitä tai asiasanoja.
Smirnov,Sergey; Gotchev,Atanas; Hannuksela,Miska
IEEE International Conference on Multimedia and Expo (2013)
Joint de-noising and fusion of 2D video and depth map sequences sensed by low-powered tof range sensor Georgiev,Mihail; Gotchev,Atanas; Hannuksela,Miska
IEEE International Conference on Multimedia and Expo (Institute of Electrical and Electronics Engineers IEEE, 2013)
Georgiev,Mihail; Gotchev,Atanas; Hannuksela,Miska
IEEE International Symposium on Circuits and Systems (Institute of Electrical and Electronics Engineers IEEE, 2013)