增强本地代码安全性的Android软件保护方法  

Android Software Protection Method by Enhancing Security of Native Programs

作　　者：张鹏[1,2] 张文[1] 牛少彰[1] 黄振鹏[1] 

机构地区：[1]北京邮电大学智能通信软件与多媒体北京市重点实验室,北京100876 [2]宁夏大学物理电气信息学院,银川750021

出　　处：《北京邮电大学学报》2015年第1期21-25,共5页Journal of Beijing University of Posts and Telecommunications

基　　金：国家自然科学基金项目(61070207;61370195);北京市自然科学基金项目(4132060);"十二五"国家密码发展基金密码理论课题(MMJJ201201002)

摘　　要：目前针对Android平台的软件保护大多集中在如何保护Dalvik字节码程序,对于本地代码程序的安全性还没有引起人们足够的重视.为了阻止攻击者对本地代码的破坏,设计实现了一种Android平台本地代码保护方法.在原始代码中插入多个冗余数据和完整性校验代码,并且对编译后的程序进行加密,使本地代码具备了抵抗攻击者静态分析和动态篡改的能力.实验结果表明,该方法可以在攻击者对本地代码进行篡改时及时地发现篡改行为,从而有效地保护Android平台本地代码,增强整个应用软件的安全性.Most research of Android software protection focuses on how to protect the Dalvik bytecode program. However,the security of native program has not been paid enough attention. In order to prevent possible attacks for Android native program,a protecting method was proposed. By inserting multiple redundant data and integrity check code into the source code,the native program will have abilities to resist dynamic tampering. It also can resist disassembling attack by combining with code encryption technology.Experiment shows that this method can protect the Android native program effectively when attacker tries to crack it by dynamically altering program code or disassembling the program.

关 键 词：ANDROID 软件保护 完整性校验 代码加密 本地代码 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]