Win32平台下基于LLVM的代码混淆技术研究  

Research on Code Obfuscation Based on LLVM Under Win32 Platform

作　　者：张泉 舒辉 李婧睿 ZHANG Quan;SHU Hui;LI Jingrui(State Key Laboratory of Mathematical Engineering & Advanced Computing, Zhengzhou 450001, China;Unit 91746, Beijing 100094,China)

机构地区：[1]数学工程与先进计算国家重点实验室 [2]91746部队

出　　处：《信息工程大学学报》2018年第4期498-502,共5页Journal of Information Engineering University

基　　金：科研基金资助项目(2016YFB0801600)

摘　　要：代码混淆是一种有效的软件保护手段,通过对代码的混淆变换,提升了软件抗逆向能力。提出了一种Win32平台下基于LLVM的代码混淆方法,通过对编译器中间语言的混淆,实现了可控型控制流混淆与不透明谓词结合的混淆算法。将LLVM编译前端与Visual Studio集成开发环境结合,实现程序编译过程的自动混淆。实验表明,该方法能有效起到混淆程序的作用,并可实现混淆强度与执行开销的平衡。Code obfuscation is an effective technology for software protection, which enhances the ability of anti-reverse engineering through code obfuscation transformation. This paper presents a method of code obfuscation based on LLVM under Win32 platform which can offer manageable control flow flattening with opaque predicates, by obfuscating the LLVM intermediate representation. Finally the LLVM compiler front-end is integrated with VS IDE through a self-defined platform toolset, which enables developers to add obfuscation measures during compilation. Experiment shows that the proposed method could achieve the effect of obfuscation and realize the balance of obfuscation potency and performance impact.

关 键 词：代码混淆 LLVM 控制流混淆 

分 类 号：TN918.1[电子电信—通信与信息系统] TNO157.4[电子电信—信息与通信工程]