基于JNI机制与云平台的细粒度Android应用加固方法  

Fine-grained Android Application Reinforcement Method Based on JNI Mechanism and Cloud Platform

作　　者：李志明[1,2,3] 刘寿春 欧阳飞帆 李婷婷 申利民 LI Zhi-ming;LIU Shou-chun;OUYANG Fei-fan;LI Ting-ting;SHEN Li-ming(College of Information Science and Engineering,Yanshan University,Qinhuangdao 066004,China;Key Laboratory for Computer Virtual Technology and System Integration of Hebei Province,Qinhuangdao 066004,China;Key Laboratory for Software Engineering of Hebei Province,Qinhuangdao 066004,China)

机构地区：[1]燕山大学信息科学与工程学院,河北秦皇岛066004 [2]河北省计算机虚拟技术与系统集成重点实验室,河北秦皇岛066004 [3]河北省软件工程重点实验室,河北秦皇岛066004

出　　处：《小型微型计算机系统》2021年第3期640-646,共7页Journal of Chinese Computer Systems

基　　金：国家自然科学基金项目(61772450)资助;河北省重点研发计划项目(20375001D)资助;河北省高等学校科技计划重点项目(ZD2018219)资助。

摘　　要：Android应用加固是信息安全领域研究的热点之一.针对现有加壳技术以及so文件整体加固方案的不足,融合JNI机制、动态加载技术及云平台理念,提出一种面向Android应用的加固模型,给出了基于JNI机制的函数代码加固方案和基于云平台的加壳解壳方案,形成了一种基于JNI机制与云平台的细粒度Android应用加固方法,从而实现了so文件的细粒度加固,解决了源apk文件易被获取以及解壳程序易被篡改的问题.开发了加固系统原型,验证了基于JNI机制与云平台的细粒度Android应用加固方法的有效性,且加固应用的Dalvik虚拟机工作负担、内存占用量及启动时间并未显著增加.Android application reinforcement is one of the hotspots in the field of information security.According to the disadvantages of the existing shell technology and so file integral reinforcement scheme,a reinforcement model for Android app was proposed based on the fusion of JNI mechanism,dynamic loading technology and cloud platform concept.And then,the function code reinforcement scheme based on JNI mechanism,shell and unshell scheme based on cloud platform were given.Further,a fine-grained Android application reinforcement method based on JNI mechanism and cloud platform was formed.Thus,the fine-grained reinforcement of so file is realized,and the problems that the source APK file is easy to be obtained and the shell program is easy to be tampered are solved.The reinforcement system prototype is developed.The effectiveness of the fine-grained Android application reinforcement method based on JNI mechanism and cloud platform is verified by the reinforcement system,and the workload of the Dalvik virtual machine,memory usage and startup time on the the reinforcement applications don’t significantly increase.

关 键 词：加固 JNI so文件 动态加载 加壳 解壳 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]