基于控制流混淆的软件保护方法研究

软件盗版、篡改和逆向工程是软件安全的主要威胁。逆向工程师利用逆向分析技术可以理解软件的行为,并从中提取核心算法和重要数据结构。针对目前大部分的混淆方法难以抵御动态攻击的缺点,文中提出一种基于控制流图多样化的代码混淆方法。实验结果表明,该方法不仅能够有效降低静态反汇编分析准度,同时能够在一个合理的性能开销之内增加动态逆向分析的难度,从而使混淆后的程序具有更高的安全性。

Study on Software Protection Method based on Control Flow Obfuscation

Software piracy, tampering and reverse engineering are the principal threats to software security. Reverse engineer could understand the behavior of the software with reverse analysis technology, and from this, extract the core algorithms and data structures. For most obfuscation methods could hardly resist the dynamic attacks, a code obfuscation method based on the control flow graph diversification is proposed. The experimental results show that this method could effectively reduce the difficulty of static disassembly analysis while enhancing the difficulty of dynamic reverse analysis within a reasonable execution time, thus making the obfuscated program of even higher security.