基于参数化分解树的控制流二次平展混淆方法  

Parameterized Decomposition Tree-Based Obfuscation Method with Double Flattening Control Flow

作　　者：周娜琴[1] 齐德昱[1] 

机构地区：[1]华南理工大学计算机系统研究所,广东广州510006

出　　处：《华南理工大学学报（自然科学版）》2015年第5期132-138,共7页Journal of South China University of Technology(Natural Science Edition)

基　　金：广东省科技计划项目(2011B010200054);广东省自然科学基金团队项目(10351806001000000);广州市应用基础研究项目(11C41150785)~~

摘　　要：针对软件白盒子安全问题,提出了一种基于参数化分解树的控制流二次平展混淆的改进方法.该方法首先根据设定的深度、广度及粒度的上界构建参数化分解树,然后用一个while-switch循环选择结构统筹整棵树,并对树中满足一定条件的节点进行二次平展.实验结果表明:与基于参数化分解树的控制流平展混淆方法相比,文中方法减少了执行开销和解决深层不作为问题;与传统的控制流平展混淆方法相比,文中方法增加了反编译及逆向工程的难度.Aiming at the security problem of software white box,an improved parameterized decomposition treebased obfuscation method with double flattening control flow is put forward. On the basis of given upper bounds of depth,breadth and granularity,the method builds a decomposition tree,coordinates the whole tree with a cycle selection structure named while-switch,and then applies double flattering to relevant nodes that satisfy certain conditions. Experimental results indicate that,in comparison with the flattening obfuscation method of control flow on the basis of parameterized decomposition tree,the proposed method reduces the execution expense and solves the deep nonfeasance problem; and that,in comparison with the traditional method only with flattening control flow,the proposed method increases the difficulty in decompilation and reverse engineering.

关 键 词：软件保护 控制流平展 代码混淆 逆向工程 分解树 安全 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]