LOCO: an interactive code (De)obfuscation tool

Authors:
Matias Madou;Ludo Van Put;Koen De Bosschere
Affiliations:
Ghent University, Ghent, Belgium;Ghent University, Ghent, Belgium;Ghent University, Ghent, Belgium
Venue:
Proceedings of the 2006 ACM SIGPLAN symposium on Partial evaluation and semantics-based program manipulation
Year:
2006

Citing 7
Cited 6

Manufacturing cheap, resilient, and stealthy opaque constructs

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
An Approach to the Obfuscation of Control-Flow of Sequential Computer Programs

ISC '01 Proceedings of the 4th International Conference on Information Security
A security architecture for survivability mechanisms

A security architecture for survivability mechanisms
Obfuscation of executable code to improve resistance to static disassembly

Proceedings of the 10th ACM conference on Computer and communications security
Link-time optimization of ARM binaries

Proceedings of the 2004 ACM SIGPLAN/SIGBED conference on Languages, compilers, and tools for embedded systems
Deobfuscation: Reverse Engineering Obfuscated Code

WCRE '05 Proceedings of the 12th Working Conference on Reverse Engineering
LANCET: a nifty code editing tool

PASTE '05 Proceedings of the 6th ACM SIGPLAN-SIGSOFT workshop on Program analysis for software tools and engineering

A static API birthmark for Windows binary executables

Journal of Systems and Software
Instruction Set Limitation in Support of Software Diversity

Information Security and Cryptology --- ICISC 2008
Behavior based software theft detection

Proceedings of the 16th ACM conference on Computer and communications security
Value-based program characterization and its application to software plagiarism detection

Proceedings of the 33rd International Conference on Software Engineering
Opaque predicates detection by abstract interpretation

AMAST'06 Proceedings of the 11th international conference on Algebraic Methodology and Software Technology
A first step towards algorithm plagiarism detection

Proceedings of the 2012 International Symposium on Software Testing and Analysis

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents LOCO, a graphical, interactive environment to experiment with code obfuscation and deobfuscation transformations, which can be applied automatically, semi-automatically and by hand. LOCO is an extension of the multi-platform visualization tool LANCET, combined with an obfuscation infrastructure in the underlying link-time program rewriter DIABLO. By use of LOCO, a developer can easily navigate through the control flow graph of a program and do fine-grained obfuscation, test new obfuscation transformations, test the robustness of existing transformations or improve existing transformations.