一种基于程序执行时间量化分析的软件水印方法  

A Software Watermarking Method Based on Program Execution Time

作　　者：张颖君[1] 陈恺[2] 鲍旭华 ZHANG Yingjun;CHEN Kai;BAO Xuhua(Trusted Computing and Information Assureance Laboratory,Institute of Software,Chinese Academy of Sciences,Beijing 100190,China;State Key Laboratory of Information Security,Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;Legendsec Information Technology(Beijing)Inc,Beijing 100015,China)

机构地区：[1]中国科学院软件研究所可信计算与信息保障实验室,北京100190 [2]中国科学院信息工程研究所信息安全国家重点实验室,北京100093 [3]网神信息技术(北京)股份有限公司,北京100015

出　　处：《电子与信息学报》2020年第8期1811-1819,共9页Journal of Electronics & Information Technology

基　　金：国家重点研发计划项目(2016QY04W0805);国家自然科学基金(U1836211);大数据协同安全国家工程实验室开放课题。

摘　　要：当前,应用软件面临的重要问题是不法分子通过软件剽窃、重打包等技术,将恶意负载或广告加载到合法应用软件中,并形成新软件进行发布,给用户和应用软件作者的合法权益带来威胁。为了实现对应用软件剽窃、重打包等安全风险的测评,该文提出一种基于程序执行时间量化分析的软件水印方法(SW_PET)。通过生成多种相互抵消功能的操作组,实现对水印信息的时间化编码,并植入应用软件中;在检测过程中,需要提取相应的水印信息,对照之前的时间编码对应的原始水印,比较不同操作的执行时间,判断水印相似度,进而判别原始水印的存在性,完成应用软件合法性的判断。该方法也可以与其它类型的水印信息相结合,增强水印的鲁棒性。最后,通过搭建仿真模拟器,实现对不同应用软件水印信息的比较和判断,验证该方法的有效性。Currently,a main problem in software is repackaging or plagiarization,which means attackers can add malicious payloads or advertisements into legitimate APPs through piggybacking,it greatly threatens the users and original developers.In this paper,a novel Software Watermarking method based on Program Execution Time(SW_PET)is proposed.By generating a variety of effect-canceling operations,the watermark information can be encoded into the form of program execution time,and can be embedded into Android APPs.In the detection process,the watermark information is extracted and compared with the original watermark to check whether the APP is repackaged.This method can be combined with other types of watermarks(e.g.,picture-based watermarks)in order to enhance the robustness.Finally,the effectiveness of the proposed approach is verified,and the overhead introduced by the watermark is measured,which is demonstrated to be minimal.

关 键 词：软件水印 程序执行 水印编码 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]