基于控制流隐藏的代码迷惑  

Code obfuscation based on control flow hiding

作　　者：孙喁喁[1] 

机构地区：[1]西安工业大学,陕西西安710021

出　　处：《电子设计工程》2015年第6期27-29,32,共4页Electronic Design Engineering

基　　金：陕西省教育厅自然科学专项基金(2013JK1191)

摘　　要：为了保护程序免受恶意攻击,确保软件的安全执行,提出了一种隐藏控制流图压平的代码迷惑方法。在已有的控制流图压平的基础上,引入分支函数和转移函数,建立了加强的压平控制流模型以防静态分析。本方案的安全性更多的是基于数据流,其模型是结构化且可扩展的,难以重构原始控制流图,所使用的单向函数不会静态的泄露任何控制流信息。若要理解程序控制流,攻击者必须对更大的代码段进行分析,能有效的防止静态逆向工程。In order to protect program from malicious attacks, ensure secure execution of program, a method of code obfuscation for hiding control flow graph flattening is proposed. Construct model of strengthening control flow flattening by introducing branch function and transfer function based on the existing control flow graph flattening to prevent static analysis.The security of this scheme is based more on data flow. The model is structured and extendable, it is difficult to reconstruct the original control flow graph, and the one-way function does not leak any control flow information statically. Attacker must to analyse more code segment to understand the control flow. It can effectively prevent static reverse engineering.

关 键 词：控制流图压平 代码迷惑 静态分析 数据流 逆向工程 

分 类 号：TN915.08[电子电信—通信与信息系统]