A Method of Software Self-sensing Attack Threats by the Improved Guard
Software run in the open complex white box attack environment and thus faced with serious reverse analysis problems. Dynamic protection is a new idea to provide long-lasting protection,and making the running software had ability to comprehensive sense the attack threats is the key to explore dynamic protection. A method of software self-sensing based on the improved guard is proposed in this paper. Firstly,classify and extract the features of attack threats; Secondly,design the corresponding improved guards,which have the ability to sense and transmit attack threat information; Then analyze the software dependencies of being protected software and determine the sensed areas; Finally in accordance with minimum cover and multi-level gateway model,layout for the chosen guards. In addition,verified the feasibility and practicability of the method in this paper through a case analysis in detail. This method is helpful to dig the relationship between attack and protection and also lays the foundation for researching on dynamic protection further.