Showing 1–2 of 2 results for author: Notarfrancesco, L

Advanced Software Protection Now

Authors: Diego Bendersky, Ariel Futoransky, Luciano Notarfrancesco, Carlos Sarraute, Ariel Waissbein

Abstract: Software digital rights management is a pressing need for the software development industry which remains, as no practical solutions have been acclamaimed succesful by the industry. We introduce a novel software-protection method, fully implemented with today's technologies, that provides traitor tracing and license enforcement and requires no additional hardware nor inter-connectivity. Our work… ▽ More Software digital rights management is a pressing need for the software development industry which remains, as no practical solutions have been acclamaimed succesful by the industry. We introduce a novel software-protection method, fully implemented with today's technologies, that provides traitor tracing and license enforcement and requires no additional hardware nor inter-connectivity. Our work benefits from the use of secure triggers, a cryptographic primitive that is secure assuming the existence of an ind-cpa secure block cipher. Using our framework, developers may insert license checks and fingerprints, and obfuscate the code using secure triggers. As a result, this rises the cost that software analysis tools have detect and modify protection mechanisms. Thus rising the complexity of cracking this system. △ Less

Submitted 11 June, 2010; originally announced June 2010.

Comments: 20 pages. CoreLabs Technical Report

Building Computer Network Attacks

Authors: Ariel Futoransky, Luciano Notarfrancesco, Gerardo Richarte, Carlos Sarraute

Abstract: In this work we start walking the path to a new perspective for viewing cyberwarfare scenarios, by introducing conceptual tools (a formal model) to evaluate the costs of an attack, to describe the theater of operations, targets, missions, actions, plans and assets involved in cyberwarfare attacks. We also describe two applications of this model: autonomous planning leading to automated penetration… ▽ More In this work we start walking the path to a new perspective for viewing cyberwarfare scenarios, by introducing conceptual tools (a formal model) to evaluate the costs of an attack, to describe the theater of operations, targets, missions, actions, plans and assets involved in cyberwarfare attacks. We also describe two applications of this model: autonomous planning leading to automated penetration tests, and attack simulations, allowing a system administrator to evaluate the vulnerabilities of his network. △ Less

Submitted 9 June, 2010; originally announced June 2010.

Comments: CoreLabs Technical Report