面向中小型企业软件的逆向工程分析  

Reverse engineering and security for small and medium-sized enterprises

作　　者：罗道乾 廖柏睿 张帆 袁文涛 LUO Daoqian;LIAO Bairui;ZHANG Fan;YUAN Wentao(Department of Science and Engineering,Shiyuan College of Nanning Normal University,Nanning 530000,China)

机构地区：[1]南宁师范大学师园学院理工系,南宁530000

出　　处：《计算机应用文摘》2023年第17期100-103,共4页Chinese Journal of Computer Application

基　　金：2022年度大学生创新创业大赛省级课题:面向中小型企业的逆向工程与安全(S202213642060)。

摘　　要：随着信息时代的高速发展和计算机的普及,软件产品层出不穷。软件安全性分析成为保证软件质量和安全性的重要手段。然而,软件的安全性与保密性并非绝对,逆向破解的人越来越多,对于中小型企业开发的软件而言,这无疑是一个巨大的挑战。为了更好地进行逆向分析,文章引入NOP填充法进行NOP填充,逆向分析的时间将大幅缩短。文章以OllyDbg软件为例,对TraceMe.exe进行反向编译和动态调试,分析关键指令并使用更加简洁的NOP填充法修改其关键指令。With the rapid development of the information age and the popularization of computers,software products are emerging endlessly.Software security analysis has become an important means to ensure software quality and security.However,the security and confidentiality of software are not absolute,and there are more and more people engaged in reverse cracking.For software developed by small and medium-sized enterprises,this is undoubtedly a huge challenge.In order to better conduct reverse analysis,the article introduces the NOP filling method for NOP filling,which will significantly shorten the time of reverse analysis.The article takes OllyDbg software as an example to reverse compile and dynamically debug TraceMe.exe,analyze key instructions,and use a more concise NOP filling method to modify its key instructions.

关 键 词：逆向工程 OLLYDBG 跳转 网络安全 NOP填充 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]