Due to the restricted resources of embedded systems, it is difficult to thwart these attacks using the majority of contemporary standard security protocols. Traditionally, cybercriminals use malicious firmware to develop possible back-doors for future attacks. Systems infected with malicious firmware maintain the appearance of normal firmware operation but execute undesirable activities, which is usually a security risk. Malicious firmware makes it easier to launch cyberattacks against embedded systems. The massive trend toward embedded systems introduces new security threats to prevent.

Experimental results show that Khaos outperforms existing code obfuscations and can significantly reduce the accuracy rates of five state-of-the-art binary diffing techniques (less than 19%) with lower runtime overhead (less than 7%). A prototype of Khaos is implemented based on the LLVM compiler and evaluated on a large number of real-world programs including SPEC CPU 2006 & 2017, CoreUtils, JavaScript engines, etc. Two obfuscation primitives are proposed to separate and aggregate the function, which are called fission and fusion respectively. In this paper, we propose a new inter-procedural code obfuscation mechanism Khaos, which moves the code across functions to obfuscate the function by using compilation optimizations. This makes existing software obfuscation techniques, which mainly focus on the intra-procedural code obfuscation, no longer effective. With the rapid development of binary diffing techniques, they can achieve more and more accurate function matching and identification by extracting the features within the function. Software obfuscation techniques can prevent binary diffing techniques from locating vulnerable code by obfuscating the third-party code, to achieve the purpose of protecting embedded device software.

Hp laserjet p2055dn printer problems