应用变形引擎实现的软件动态保护方法研究

Research on the Software Dynamic Protection by Using Metamorphic Engine

通过对软件动态保护的研究,提出了应用变形引擎实现的软件动态保护方法.将待保护软件的重要代码片段从软件中删除,利用自修改变形技术构造这些重要代码片段的变形引擎,在软件执行过程中,将它们依次还原并执行;同时,根据一些代码片段的执行时间控制变形子引擎的调度;并且利用动态加解密技术对变形子引擎进行保护.这种方法大大增加了软件攻击者成功逆向该软件所需的时间和精力.最后通过实验说明软件安全强度的提高对性能造成了一定的影响.

Through researching on software dynamic protection,the metamorphic engines based method is proposed.The method deletes the important code segments from the softw are that to be protected and generates the metamorphic engines of these code segments by self-modifying technology.When protected softw are is executing,restoring them into specific location.Meanw hile,according to executing time of some code segments,controlling the dispatch of the metamorphic sub-engines.Also,dynamic encryption and decryption is used to protect the metamorphic sub-engines.The method can increase time and energy to reverse softw are for softw are attackers.By experiments,it affects the softw are＇s performance in some extent w hen improving softw are security strength.