一种新的抵抗动态分析软件保护模型设计与实现

Design and implementation of new software protection model for dynamic analysis resistance

作为最常用的软件保护方式之一,序列号保护面临着最多的攻击者的研究。破解者主要的攻击过程分为黑盒阶段,动态分析阶段,静态分析阶段和编辑阶段。动态分析可以理解成一个遵循"定位保护代码-修改二进制代码-测试"的破解循环。从该破解循环入手,提出一种新的程序架构,在校验代码之前加入某种规则决定是否进行校验,并将其嵌入主程序的不同位置,形成的对主程序的校验位置的组合有2N种,这可为软件提供更有效的保护措施。

As one of the most commonly used method of software protection, serial number protection is facing up to the crackers＇ research. The main process of software attacking is divided into black box stage, dynamic analysis stage, static analysis stage and editing stage. Dynamic analysis stage can be understood as a follow ＂positioning the protection code-modify the binary code-test＂ of the work cycle. From the work cycle of dynamic analysis stage, we put forward a new program architecture, by adding certain rules before deciding whether to execute the code for checking serial number, and to embed them into the main program for n times, so there are 2^n different kinds of combinations of the code for checking serial number to form. Thus the software can be protected more effectively.