代码迷惑及其有效性研究  

Research of code obfuscation and its efficiency

作　　者：徐长征[1] 杜玉杰 陈岩[1] 王清贤[1] 

机构地区：[1]解放军信息工程大学信息工程学院,郑州450002 [2]山东省招远市统计局,山东招远265400

出　　处：《计算机应用研究》2009年第9期3502-3505,共4页Application Research of Computers

基　　金：国家"863"计划资助项目(2007AA01Z471);河南省基础与前沿技术研究计划资助项目(082300410150)

摘　　要：代码迷惑(保护程序的一种手段)通过增加程序的分析理解难度来阻止攻击者对代码进行有用的窜改。从攻击视角指出,盲目采用代码迷惑并不能有效增强程序安全性,而根据攻击模型,从多个角度综合运用各种码迷惑方法将能有效提高程序安全。随后建立攻击模型,将攻击描述为一个不断提取程序信息并据此分析具体语义,进而通过抽象和判断获取抽象语义的过程,并从攻击各层面出发引入相应的代码迷惑方法,进而保护代码安全。Code obfuscation is an approach of protecting program. It protects code from attackers＇ useful tamper through enhancing the difficulty of understanding program. This paper pointed out the code obfuscation that was adopted blindly was not sure to protect program efficiently and various obfuscation methods should be combined from multi-point of view based on attac king model. Then it built an attacking model, which described attack as a procedure of distilling program information and analyzing concrete semantic and acquiring abstract semantic. At the same time, introduced the corresponding code obfuscation methods according to the model.

关 键 词：代码迷惑 软件保护 程序分析 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]