基于Smali-Java关键代码修复的Android程序逆向分析方法

Android program reverse analysis method based on Smali-Java key code repair

目前Android程序取证主要是采用逆向分析方法,但是在将APK程序转换为Java源代码的过程中,部分核心代码因结构复杂,无法转换为正确的Java源程序。针对这一问题,提出一种基于Smali-Java关键代码修复的Android程序逆向分析方法,这种方法通过人工分析方式,根据Smali源代码完成受损Java程序的修复。通过大量实际测试,证明该方法可以较好地应用于案件的检验鉴定工作。

Studying the forensic identification method of Android programs and locking the location information of criminal suspects has practical significance to crack down on the illegal and criminal activities of Android malicious programs.At present,the Android program forensics mainly uses the reverse analysis method,but in the process of converting the APK program into Java source code,part of the core code cannot be converted into the correct Java source code due to the complicated structure.In order to resolve this problem,this paper proposes a reverse analysis method of Android program based on Smali-Java key code repair.This method completes the repair of damaged Java code according to Smali source code through manual analysis.Through a large number of tests,it is proved that this method can be applied to the inspection and identification of cases.