摘要
针对Linux系统下加壳软件易被发现、易改变原有程序入口地址等一系列问题,提出了一种改进的软件加壳方法——加壳并重构可执行文件,即:SRELF(Shelling and Re-constructed Executable and LinkingFormat)。改进后的方法将壳程序和目标可执行文件中代码段、数据段等关键部分结合,使代码呈多态性后重新构造出新的可执行文件,使得加密软件运行的同时脱离原宿主计算机,避免了被保护软件因相同版本被破解形成通用的破解补丁。通过SRELF在安全性,透明性,伪装性和扩展性等方面的分析,证明了改进后的加壳方法在整体性能上都有显著的提高。
In order to solve the problems in Linux system,like： shell software easy to be found,easy to change the entry address of the source program and so on.This paper put forword a improved shell software which has shelling and re-constructed executlable and linkingformat.The improved method combined with the
出处
《电子设计工程》
2012年第10期13-15,18,共4页
Electronic Design Engineering
基金
陕西省教育厅科技计划项目资助(2010kg432)
关键词
壳软键
壳技术
多态变形
重构
in the shell
target executable file code and data section.The code present polymorphism and re-construct the new executable file
when the encryption software moved
is away from the host computer
protection software avoid the general patches which from the same version.Analysising the security
transparency
camouflage and expansibility of SRELF
improved the shell methods in terms of overall performance has remarkably increased. Key words： shell technoloy
shell software
polymorphism deformation
re-constructu
