一种基于程序执行时间量化分析的软件水印方法

A Software Watermarking Method Based on Program Execution Time

当前,应用软件面临的重要问题是不法分子通过软件剽窃、重打包等技术,将恶意负载或广告加载到合法应用软件中,并形成新软件进行发布,给用户和应用软件作者的合法权益带来威胁。为了实现对应用软件剽窃、重打包等安全风险的测评,该文提出一种基于程序执行时间量化分析的软件水印方法(SW_PET)。通过生成多种相互抵消功能的操作组,实现对水印信息的时间化编码,并植入应用软件中;在检测过程中,需要提取相应的水印信息,对照之前的时间编码对应的原始水印,比较不同操作的执行时间,判断水印相似度,进而判别原始水印的存在性,完成应用软件合法性的判断。该方法也可以与其它类型的水印信息相结合,增强水印的鲁棒性。最后,通过搭建仿真模拟器,实现对不同应用软件水印信息的比较和判断,验证该方法的有效性。

Currently,a main problem in software is repackaging or plagiarization,which means attackers can add malicious payloads or advertisements into legitimate APPs through piggybacking,it greatly threatens the users and original developers.In this paper,a novel Software Watermarking method based on Program Execution Time(SW_PET)is proposed.By generating a variety of effect-canceling operations,the watermark information can be encoded into the form of program execution time,and can be embedded into Android APPs.In the detection process,the watermark information is extracted and compared with the original watermark to check whether the APP is repackaged.This method can be combined with other types of watermarks(e.g.,picture-based watermarks)in order to enhance the robustness.Finally,the effectiveness of the proposed approach is verified,and the overhead introduced by the watermark is measured,which is demonstrated to be minimal.