http://en.zaoniao.it/index.php?action=history&feed=atom&title=Software_taggant 2026-05-15T08:01:59Z Revision history for this page on the wiki MediaWiki 1.32.0 http://en.zaoniao.it/index.php?title=Software_taggant&diff=6851&oldid=prev 2019-07-16T08:55:30Z

<p>Created page with &quot;A &#039;&#039;&#039;software taggant&#039;&#039;&#039; is a cryptographic signature added to software that enables positive origin identification and integrity of programs. Software taggants are using stan...&quot;</p> <p><b>New page</b></p><div>A '''software taggant''' is a cryptographic signature added to software that enables positive origin identification and integrity of programs. Software taggants are using standard PKI techniques (see [[Public key infrastructure]]) and were introduced by the [[Industry Connections Security Group]] of [[IEEE]] in an attempt to control proliferation of [[malware]] obfuscated via [[executable compression]] ([[runtime packer]]).<br /> <br /> The concept of a PKI-based system to mitigate [[runtime packer]] abuse was introduced in 2010 and described in a [[Black Hat Briefings]] presentation by Mark Kennedy and [[Igor Muttik]]. The '''software taggant''' term was proposed by Arun Lakhotia (due to its similarities with chemical [[taggant]]s) who also analyzed the economics of a packer ecosystem.<br /> <br /> A '''software taggant''' is a form of [[code signing]] somewhat similar to [[Authenticode]] (which is used for programs operating under [[Microsoft Windows]]). The key differences between a '''software taggant''' and Authenticode are:<br /> * the transparent and free addition of a '''software taggant''' for the end user of a [[runtime packer]]<br /> * a '''software taggant''' may cover small critical areas of the program to minimize the cost of software integrity checking (Authenticode always covers nearly the entire file so the cost of checking linearly depends on the file size)<br /> <br /> The '''software taggant''' project is run by [[Industry Connections Security Group|IEEE ICSG]] and has open-source nature - it is hosted on [[GitHub]] and relies on [[OpenSSL]]. '''Software taggant''' also helps differentiate many legitimate software from malware which also utilize similar and/or the same anti-tamper technology.<br /> <br /> ==Source==<br /> <br /> [http://wikipedia.org/ http://wikipedia.org/]<br /> [[Category:Software]]<br /> [[Category:Cryptographic algorithms]]<br /> [[Category:Security]]<br /> ==See Also on BitcoinWiki==<br /> * [[Ethereum Travel Token]]<br /> * [[QUASA]]<br /> * [[WeBloc]]<br /> * [[Properbuz]]<br /> * [[Hey, Be Well]]</div>

Admin