基于反调试的JavaScript代码保护方法研究  

Research on Java Script Code Protection Through Anti-debugging

作　　者：陈晓江[1,2] 董浩[1,2] 房鼎益[1,2] 王怀军[3] 张凡[2,4] 

机构地区：[1]西北大学信息科学与技术学院,陕西西安710127 [2]西北大学-爱迪德物联网信息安全联合实验室,陕西西安710127 [3]西安理工大学计算机科学与工程学院,陕西西安710048 [4]爱迪德技术(北京)有限公司,北京100125

出　　处：《四川大学学报（工程科学版）》2015年第1期27-35,共9页Journal of Sichuan University (Engineering Science Edition)

基　　金：国家科技支撑计划资助项目(2013BAK01B02);国家自然科学基金资助项目(61170218;61272461;61202393);陕西省教育厅产业化培育项目资助(2013JC07);陕西省自然科学基础研究计划资助项目(2012JQ8049)

摘　　要：为了消除攻击者动态调试Java Script代码给HTML5应用程序带来的安全威胁,提出一种基于反调试的代码保护方法。在深入分析Firefox及Chrome浏览器中调试器工作原理的基础上,探索了主流浏览器平台中调试器运行时的特征。基于调试器特征构造检测调试行为的Java Script代码片,并结合针对调试行为的响应策略达到反动态调试目的。通过攻击实例验证了该方法的有效性,在不影响程序性能的前提下提升了Web应用程序的安全性。In order to eliminate the security threat to HTML5 applications posed by debugging Java Script code during attack process,a method of protecting Java Script code through anti-debugging was proposed. The Java Script debugging principle on Firefox and Chrome was analyzed,and the runtime features introduced by these mainstream browsers' debuggers were explored.Then combined with these features and some penalties to the debugging behavior,some anti-debugging approaches were devised and applied to achieve anti-debugging protection on Web applications. The experiments showed that these anti-debugging approaches can effectively protect Web applications from being debugged dynamically without much overhead.

关 键 词：HTML5 JAVA Script代码保护 反调试 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]