Software Watermarking using Return-Oriented Programming

We propose a novel dynamic software watermarking design based on Return-Oriented Programming (ROP). Our design formats watermarking code into well-crafted data arrangements that look like normal data but could be triggered to execute. Once triggered, the pre-constructed ROP execution will recover the hidden watermark message. The proposed ROP-based watermarking technique is more stealthy and resilient over existing techniques since the watermarking code is allocated dynamically into data region and therefore out of reach of attacks based on code analysis. Evaluations show that our design not only achieves satisfying stealth and resilience, but also causes significantly lower overhead to the watermarked program. Categories and Subject Descriptors K.5.1 [Legal Aspects of Computing]: Hardware/Software Protection – Proprietary rights General Terms Security Keywords Software watermarking, return-oriented programming, reverse engineering, code obfuscation

• Type: Journal
• Year: 2015
• Where: CCS
• Authors: Haoyu Ma, Kangjie Lu, Xinjie Ma, Haining Zhang, Chunfu Jia, Debin Gao
• Keywords: CCS 2015, Security Privacy