Abstract
Software is under attack from many sides. Cryptographic and other software is under attack to extract secret keys and other sensitive information. And software is under attack of reverse-engineering attacks to extract intellectual property or vulnerabilities. In this talk, we present two compiler techniques to improve protection. One is based on if-conversion to avoid the leaking of sensitive information through side-channels such as an encryption's execution time. The other is based on software diversity to ensure that it is (1) more difficult to attack software, (2) in case of a successful attack, it is more difficult to distribute a successful crack.