Software Activation Using Multithreading

Full Text (PDF, 1032KB), PP.1-17

Views: 0 Downloads: 0

Author(s)

Jianrui Zhang 1,* Mark Stamp 1

1. San Jose State University, San Jose, California

* Corresponding author.

DOI: https://doi.org/10.5815/ijcnis.2012.12.01

Received: 23 Apr. 2012 / Revised: 19 Jul. 2012 / Accepted: 11 Sep. 2012 / Published: 8 Nov. 2012

Index Terms

Software security, activation, piracy, reverse engineering, multithreading

Abstract

Software activation is an anti-piracy technology designed to verify that software products have been legitimately licensed. Activation should be quick and simple while simultaneously being secure and protecting customer privacy. The most common form of software activation is for the user to enter a legitimate product serial number. However, software activation based on serial numbers appears to be weak, since cracks for many programs are readily available on the Internet. Users can employ such cracks to bypass software activation.
Serial number verification logic usually executes sequentially in a single thread. Such an approach is relatively easy to break since attackers can trace the code to understand how the logic works. In this paper, we develop a practical multi-threaded verification design. Our results show that by proper use of multi-threading, the amount of traceable code in a debugger can be reduced to a low percentage of the total and the traceable code in each run can differ as well. This makes it significantly more difficult for an attacker to reverse engineer the code as a means of bypassing a security check. Finally, we attempt to quantify the increased effort needed to break our verification logic.

Cite This Paper

Jianrui Zhang, Mark Stamp, "Software Activation Using Multithreading", International Journal of Computer Network and Information Security(IJCNIS), vol.4, no.12, pp.1-17, 2012. DOI:10.5815/ijcnis.2012.12.01

Reference

[1]activatesoft.net, "Product Activation Overview", http://www.activatesoft.net/activation_overview.asp
[2]Chris Davies, "Windows 7 cracked after Lenovo OEM key leaks", http://www.slashgear.com/windows-7-cracked-after-lenovo-oem-key-leaks-2950684/
[3]ORC, "How to Crack", http://www.mindspring.com/~win32ch/howtocrk.zip
[4]Jianrui Zhang & Shengyu Li, "CS265 Project 2 Report", 05/11/2009
[5]MLC Technologies, "Hardware Key Activation", http://www.mcl-collection.com/support/licensing/hardware_key.php
[6]Schlumberger, "Cyberflex Access Cards Programmer's Guide", Jan 2004
[7]Bank of China, "Security Mechanism (Cooperate Service)", http://www.bankofchina.com/en/custserv/bocnet/200812/t20081212_144526.html
[8]Logic Protect, http://www.logicprotect.com/index.asp
[9]Mark Stamp, Information Security: Principles and Practices, Wiley 2006
[10]Mark Stamp, lecture notes on "Software Breaking", Fall 2009
[11]Wikipedia, http://en.wikipedia.org/wiki/Product_activation
[12]Martin Cowley, "Frontend Plush", http://frontend-plus.software.informer.com/
[13]Eric Lafortune, "ProGuard", http://proguard.sourceforge.net/
[14]Christian Collberg, "SandMark", http://sandmark.cs.arizona.edu/
[15]Scott Oaks, "Java Security", Published by O'Reilly, 2001
[16]Borland, JBuilder 2007 Documentation
[17]XenoCode, http://www.xenocode.com/
[18]Wikipedia, http://en.wikipedia.org/wiki/Polymorphic_code
[19]Shameen Akhter & Jason Roberts, "Multi-Core Programming: Increasing Performance through Software Multi-threading"
[20]BestSerials, http://www.bestserials.com/
[21]CrackLoader, http://www.crackloader.com/
[22]Australian Institute of Criminology, http://www.aic.gov.au/
[23]Jedisware, http://www.jedisware.com/
[24]Cyberlink, http://www.cyberlink.com/products/powerdvd/overview_en_US.html
[25]Chinmaan, http://i179.photobucket.com/albums/w306/chinmaan/activation.jpg
[26]RabLab, http://www.rarlab.com/
[27]Avast, http://www.avast.com/free-antivirus-download
[28]IDA Pro, http://www.hex-rays.com/idapro/
[29]OllyDbg, http://www.ollydbg.de/