Self-checking software tamper resistance mechanisms employing checksums, including advanced systems as recently proposed by Chang and Atallah (2002) and Horne et al. (2002), have been promoted as an alternative to other software integrity verification techniques. Appealing aspects include the promise of being able to verify the integrity of software independent of the external support environment, as well as the ability to automatically integrate checksumming code during program compilation or linking. In this paper, we show that the rich functionality of many modem processors, including UltraSparc and x86-compatible processors, facilitates automated attacks which defeat such checksumming by self-checking programs.

Additional Metadata
Persistent URL dx.doi.org/10.1109/SP.2005.2
Conference 2005 IEEE Symposium on Security and Privacy, IEEE S and P 2005
Citation
Wurster, G. (Glenn), Van Oorschot, P, & Somayaji, A. (2005). A generic attack on checksumming-based software tamper resistance. Presented at the 2005 IEEE Symposium on Security and Privacy, IEEE S and P 2005. doi:10.1109/SP.2005.2