摘要
bf算法是一种针对静态反汇编的混淆算法,但由于bf函数跳转地址的固定性,很容易被逆向还原.据此提出一种基于bf算法的改进型代码混淆算法,利用bf算法中的垃圾指令重定位bf函数的跳转地址并隐藏二次跳转地址,新算法改进了bf算法中的缺陷,同时提升了bf算法针对静态反汇编的混淆复杂度.实验中对测试样本分别进行基于bf算法的混淆和新算法的混淆并使用静态反汇编工具IDA Pro进行测试,实验数据表明新算法在性能和安全性方面有显著的提升.
Code obfuscation was employed to prevent the software reverse analysis and protect the important information effectively by strengthening the restore difficult.bf（branch function）algorithm is obfuscation algorithm effective for the static disassembly,but the bf jump is a constant address,so it is easy to be restored.The proposed algorithm based on the bf algorithm improved the defect and enhanced the confusing complexity for the static disassembly,reusing the junk instruction to relocate the bf function jump address and hide the second jump address.In the experiment,the test samples were obfuscated by bf algorithm and the proposed algorithm separately and the static disassembly tool IDA Pro was used for testing,the experimental results show that the new algorithm has significantly improvement in performance and security.
出处
《北京理工大学学报》
EI
CAS
CSCD
北大核心
2015年第3期272-278,共7页
Transactions of Beijing Institute of Technology
基金
国家科技支撑计划项目(2012BAH37B05)
关键词
静态反汇编
代码混淆
垃圾指令
信息隐藏
static disassembly
code obfuscation
junk instruction
information hiding
