Скачать или смотреть Hatching Ideas: Mastering Encryption and Obfuscation

00:00:00 Intro
00:03:50 5 Years Ago
00:06:34 Encryption vs Obfuscation
00:08:04 Encryption vs Obfuscation – Security Level
00:09:38 AxProtector CTP
00:10:04 Compile Time Protection
00:11:36 Comparison AxProtector Classic vs. CTP
00:13:49 Structure of a Function
00:14:52 Obfuscation Techniques
00:16:22 Control Flow Encryption
00:17:29 Unprotected
00:18:41 Protected
00:21:09 Usage – CMake Configuration Without Protection
00:21:46 Usage – CMake Configuration With Protection
00:25:39 AxProtector CTP Features
00:31:05 Usage – protect.WibuCpsConf
00:31:41 Demo – Automatic- & Modular Protection License-Free
00:44:25 Automatic CodeMoving
00:46:47 Protection Feature Comparison
00:48:33 Automatic Protection Pipeline
00:51:15 Demo – Automatic CodeMoving, Advanced Obfuscation
01:00:37 OS Security
01:01:57 Roundup
01:04:00 Q&A

Almost 10 years ago, Wibu-Systems faced the challenge of improving the self-protection of CodeMeter Runtime. Our own solution, AxProtector, set the standard. AxProtector encrypts the application after compilation. Depending on the selected settings, either the entire application is decrypted at runtime, or defined, critical code blocks are decrypted only when needed. However, an application protected by AxProtector always requires a license for execution, as the keys for decryption are stored within the license.

On the one hand, CodeMeter Runtime provides the licenses, which would create a chicken-and-egg problem. On the other hand, while the approach of dynamic decryption is sufficient in many cases, we wanted to elevate the protection to a new level, even in cases where no license is required.

Our intensive search for an external solution ultimately led to the conclusion that no ready-made solution existed. This marked the starting point for us to develop our own solution for the obfuscation of native (C/C++ and Rust) code. This solution intervenes during the compilation of the application: Compile Time Protection = CTP. With a plugin in the compiler, the code is modified so that later, at runtime, it becomes nearly impossible to analyze.

After this solution was developed, improved, and successfully implemented in CodeMeter Runtime and AxProtector over several years, the time came when customers began asking for a similar solution. This was the birth of AxProtector CTP. Like a dragon, it hatched from the well-guarded egg and has since protected your software against potential hackers.

AxProtector CTP not only offers obfuscation of the application but also includes all the functions provided by the classic AxProtector. The obfuscation of the entire application can be tied to the presence of a license by encrypting data and control flow. Individual functions can be protected with other licenses. The relocation of executable code to a CmDongle or a CmCloudContainer (namely CodeMoving) is supported, as well as operation without a license on the user’s end.