基于分支函数的混淆技术研究  

Research on Obfuscation Technique Based on Branch Functions

作　　者：曹淑琴[1] 郑成龙[1] 

机构地区：[1]北方工业大学信息工程学院,北京100144

出　　处：《计算机与现代化》2012年第2期168-170,179,共4页Computer and Modernization

摘　　要：静态反汇编是对程序进行逆向工程的第一步,它将程序的可执行机器码以汇编指令代码的形式表示,给盗用软件知识产权和发掘软件漏洞提供了可能。为了混淆静态反汇编过程,增加对程序进行反汇编的难度,本文深入研究基于分支函数的静态反汇编混淆技术,针对其隐蔽性较差和代码执行效率低下的缺点,提出一种改进的分支函数静态反汇编混淆技术。改进后的混淆技术不仅能够有效地隐藏程序中的跳转指令,提高了代码的执行效率,同时增加了软件逆向工程分析的难度。The process of reverse engineering is an executable program typically begins with static disassembly that translates machine code to assembly code,which creates opportunities for theft of intellectual property and discoveries of vulnerabilities of the program.In order to disrupt the static disassembly process so as to make programs harder to disassemble correctly,after a deep research on the static disassembly obfuscation technique based on branch functions and its weakness on invisibility and code execution speed,this paper proposes an improved obfuscation technique based on branch functions which not only can hide the jump instructions efficiently but also enhance the code execution speed,and make the analysis of reverse engineering more difficult at the same time.

关 键 词：逆向工程 混淆技术 静态反汇编 分支函数 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]