@Article{2018JOWUA,
  author    = {Alessio Viticchi{\'{e}} and Cataldo Basile and Fulvio Valenza and Antonio Lioy},
  doi       = {10.22667/JOWUA.2018.06.30.001},
  journal   = {J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl.},
  number    = {2},
  pages     = {1--25},
  title     = {On the impossibility of effectively using likely-invariants for software attestation purposes},
  volume    = {9},
  year      = {2018},
  abstract={Invariants monitoring is a software attestation technique that aims at proving the integrity of a run-ning application by checking likely-invariants, which are statistically significant predicates inferred on variables’ values. Being very promising, according to the software protection literature, we de-veloped a technique to remotely monitor invariants. This paper presents the analysis we performed to assess the effectiveness of our technique and the effectiveness of likely-invariants for software attestation purposes. Moreover, it illustrates the identified limitations and our attempts to improve the detection abilities of this technique. Our results suggest that, although further studies and future results might increase its effectiveness and reduce the side effects, software attestation based on likely-invariants is not yet ready for the real world. Software developers should be warned of these limitations, if they would be tempted by adopting this technique, and companies developing software protections should not invest in development without investing in further research too. © 2018, Innovative Information Science and Technology Research Group.},
    keywords={Remote Attestation},
  url = {https://iris.polito.it/retrieve/handle/11583/2711778/206061/2018BasileInvariants.pdf}
}

{"_id":"7FwJXQ3ju3T2PgYtd","bibbaseid":"viticchi-basile-valenza-lioy-ontheimpossibilityofeffectivelyusinglikelyinvariantsforsoftwareattestationpurposes-2018","authorIDs":["anJrBcCdr4LzzWetx","x5vNTEJ4s3raTsibp"],"author_short":["Viticchié, A.","Basile, C.","Valenza, F.","Lioy, A."],"bibdata":{"bibtype":"article","type":"article","author":[{"firstnames":["Alessio"],"propositions":[],"lastnames":["Viticchié"],"suffixes":[]},{"firstnames":["Cataldo"],"propositions":[],"lastnames":["Basile"],"suffixes":[]},{"firstnames":["Fulvio"],"propositions":[],"lastnames":["Valenza"],"suffixes":[]},{"firstnames":["Antonio"],"propositions":[],"lastnames":["Lioy"],"suffixes":[]}],"doi":"10.22667/JOWUA.2018.06.30.001","journal":"J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl.","number":"2","pages":"1–25","title":"On the impossibility of effectively using likely-invariants for software attestation purposes","volume":"9","year":"2018","abstract":"Invariants monitoring is a software attestation technique that aims at proving the integrity of a run-ning application by checking likely-invariants, which are statistically significant predicates inferred on variables’ values. Being very promising, according to the software protection literature, we de-veloped a technique to remotely monitor invariants. This paper presents the analysis we performed to assess the effectiveness of our technique and the effectiveness of likely-invariants for software attestation purposes. Moreover, it illustrates the identified limitations and our attempts to improve the detection abilities of this technique. Our results suggest that, although further studies and future results might increase its effectiveness and reduce the side effects, software attestation based on likely-invariants is not yet ready for the real world. Software developers should be warned of these limitations, if they would be tempted by adopting this technique, and companies developing software protections should not invest in development without investing in further research too. © 2018, Innovative Information Science and Technology Research Group.","keywords":"Remote Attestation","url":"https://iris.polito.it/retrieve/handle/11583/2711778/206061/2018BasileInvariants.pdf","bibtex":"@Article{2018JOWUA,\r\n author = {Alessio Viticchi{\\'{e}} and Cataldo Basile and Fulvio Valenza and Antonio Lioy},\r\n doi = {10.22667/JOWUA.2018.06.30.001},\r\n journal = {J. Wirel. Mob. Networks Ubiquitous Comput. Dependable Appl.},\r\n number = {2},\r\n pages = {1--25},\r\n title = {On the impossibility of effectively using likely-invariants for software attestation purposes},\r\n volume = {9},\r\n year = {2018},\r\n abstract={Invariants monitoring is a software attestation technique that aims at proving the integrity of a run-ning application by checking likely-invariants, which are statistically significant predicates inferred on variables’ values. Being very promising, according to the software protection literature, we de-veloped a technique to remotely monitor invariants. This paper presents the analysis we performed to assess the effectiveness of our technique and the effectiveness of likely-invariants for software attestation purposes. Moreover, it illustrates the identified limitations and our attempts to improve the detection abilities of this technique. Our results suggest that, although further studies and future results might increase its effectiveness and reduce the side effects, software attestation based on likely-invariants is not yet ready for the real world. Software developers should be warned of these limitations, if they would be tempted by adopting this technique, and companies developing software protections should not invest in development without investing in further research too. © 2018, Innovative Information Science and Technology Research Group.},\r\n keywords={Remote Attestation},\r\n url = {https://iris.polito.it/retrieve/handle/11583/2711778/206061/2018BasileInvariants.pdf}\r\n}\r\n\r\n\r\n","author_short":["Viticchié, A.","Basile, C.","Valenza, F.","Lioy, A."],"key":"2018JOWUA","id":"2018JOWUA","bibbaseid":"viticchi-basile-valenza-lioy-ontheimpossibilityofeffectivelyusinglikelyinvariantsforsoftwareattestationpurposes-2018","role":"author","urls":{"Paper":"https://iris.polito.it/retrieve/handle/11583/2711778/206061/2018BasileInvariants.pdf"},"keyword":["Remote Attestation"],"metadata":{"authorlinks":{"valenza, f":"https://bibbase.org/show?bib=https%3A%2F%2Fraw.githubusercontent.com%2FFulvioValenza%2Fbibliography%2Fmain%2FValenza_bibliography.bib&commas=true","valenza, f":"https://bibbase.org/service/mendeley/47be63fe-fca0-3f0f-a864-642602926c3f"}},"downloads":3},"bibtype":"article","biburl":"https://raw.githubusercontent.com/FulvioValenza/bibliography/b6ac2db7ddcda59103b48375cf05b3b9dcff4ded/Valenza_bibliography.bib","creationDate":"2021-01-16T10:07:49.757Z","downloads":3,"keywords":["remote attestation"],"search_terms":["impossibility","effectively","using","invariants","software","attestation","purposes","viticchié","basile","valenza","lioy"],"title":"On the impossibility of effectively using likely-invariants for software attestation purposes","year":2018,"dataSources":["JbiX35GNqPCF3nids","csYhy47rJJgSM7jjJ"]}