基于函数指针数组的代码迷惑技术  

Technique of Code Obfuscation Based on Function Pointer Array

作　　者：李永祥[1] 陈意云[1,2] 

机构地区：[1]中国科学技术大学计算机科学与技术系 [2]中国科学院软件研究所计算机科学实验室北京100080

出　　处：《计算机学报》2004年第12期1706-1711,共6页Chinese Journal of Computers

基　　金：国家自然科学基金 (60 173 0 49)资助

摘　　要：移动代理在网络计算中经常遇到有目的的篡改攻击 ,只要通过代码迷惑技术使得对移动代理的程序分析复杂度增加或精确性降低 ,就能有效地增加这种攻击的难度 ,从而在一定程度上阻止这种攻击 .函数指针分析及控制流分析是程序分析中的难点 ,也是引起分析的精确度降低的原因 .文章首先给出一种增添函数指针数组的程序变换方法 ,使得函数之间的调用关系函数变得难以分析 ;同时提出一种控制流变换方法来增加程序分析中的数据流及控制流分析的复杂度 ,从而使得程序分析的精确度大大降低 ,最终使篡改攻击难以达到目的 .Mobile agent may often be purposefully tampered in the net, but we can increase the difficulty of the tampering attack effectively if we can increase the complexity and decrease the accuracy of analysis to the mobile code by the code obfuscation techniques so as to prevent the tampering attack. Function pointer alias and control flow analysis are difficulties in the course of program analysis, and reasons why the accuracy of program analysis are decreased. This article firstly presents a kind of method to transform the program to make it difficult to analyze the function call relation by adding function pointer array, at the same time mentions a method to transform the control flow to increase the complexity of the dataflow and control flow analysis. So the accuracy of the program analysis is decreased greatly and the tamper attack is hard to attain its purpose.

关 键 词：代码迷惑 函数指针 控制流变换 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]