Self-debugging
In overview, methods, computer programs products and devices for securing software are provided. In accordance with the disclosure, a method may comprise attaching a debugger process to a software process. During execution of the software process, operations relevant to the functionality of the code process are carried out within the debugger process. As a result, the debugger process cannot be replaced or subverted without impinging on the functionality of the software process. The software process can therefore be protected from inspection by modified or malicious debugging techniques.
1. A method for securing software, comprising:
launching a software process;
attaching a debugger process to the software process;
executing the software process such that the debugger process is invoked at least once; and
performing one or more functions within the debugger process in response to invocation of the debugger process, the one or more functions having an output dependent on data associated with the software process;
wherein the output of the one or more functions within the debugger process serves as data input for remaining part of the software process.
2. A method according to claim 1 , wherein the output comprises a data output for use by the software process.
3. A method according to claim 1 , wherein the output of a given function may indicate multiple points of return within the software process for continued execution.
4. A method according to claim 1 , wherein the debugger process provides memory support capabilities to enable the one or more functions to retrieve data from memory within address space of the software process.
5. A method according to claim 1 , wherein the debugger process is invoked when a break point within the software process is reached.
6. A method according to claim 1 , wherein the software process implements an executable, such as an application.
7. A method according to claim 1 , wherein the software process implements a library.
8. A computer comprising:
a memory having executable instructions executed by a processor to:
launch a software process;
attach a debugger process to the software process;
execute the software process such that the debugger process is invoked at least once; and
perform one or more functions within the debugger process in response to invocation of the debugger process, the one or more functions having an output dependent on data associated with the software process;
wherein the output of the one or more functions within the debugger process serves as data input for remaining part of the software process.
9. A non-transitory computer readable medium having executable instructions when executed by a processor cause a computer to:
launch a software process;
attach a debugger process to the software process;
execute the software process such that the debugger process is invoked at least once; and
perform one or more functions within the debugger process in response to invocation of the debugger process, the one or more functions having an output dependent on data associated with the software process;
wherein the output of the one or more functions within the debugger process serves as data input for remaining part of the software process.