一种反动态调试和网络交互加密验证的Android软件保护策略  

An Android Software Protection Scheme Based on AntiDebugging and Online Encryption Verification

作　　者：李克秋[1] 史孝龙 徐君锋[2] 

机构地区：[1]大连理工大学计算机科学与技术学院,辽宁大连116024 [2]中国信息安全测评中心,北京100085

出　　处：《北京理工大学学报》2017年第12期1276-1281,共6页Transactions of Beijing Institute of Technology

基　　金：国家自然科学基金资助项目(61672534;61225010;61272417)

摘　　要：为对抗对Android软件的逆向分析和恶意破解,通过对Android安全技术中反动态调试技术的深入研究,对现有技术进行了改进.综合利用反动态调试、软件加密、反射及动态加载等技术,设计并实现了一种基于网络密钥的Android应用加固方案.对方案的可行性、反动态调试及对抗脱壳的有效性进行了实验验证.实验结果表明,该方案能有效阻止对Android软件的逆向分析,增加了破解Android软件的难度,增强了Android软件的安全性.In order to enhance the resistance of Android software to reverse analysis and malicious crack,the existing technology was improved by means of analyzing anti-debugging technology in Android security,and an Android reinforcement scheme based on online key was designed and implemented with comprehensive utilization of anti-debugging,software encryption,reflection and dynamic loading techniques.The feasibility of the scheme,the effectiveness of antidebugging and anti-shell cracking were experimentally verified.Experimental results show that the proposed scheme can effectively prevent Android software from being reverse analysis,increase the difficulty of cracking Android software and enhance the security of Android software.

关 键 词：Android安全 反调试 动态加载 软件加壳 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论]