Reinforcement protection method and device for software installation package

Abstract

The invention provides a method and device for strengthening and protecting a software installation package. Wherein, the reinforcement protection method of the software installation package includes: extracting the global configuration file and the executable file in the software installation package; parsing the executable file to obtain the first code; inserting the protection code into the first code to obtain the second code, and The second code is encrypted; the global configuration file is modified according to the entry point of the protected code; and the modified global configuration file and executable file are repackaged to generate a hardened installation package. In the technical solution of the present invention, the protection code is directly inserted into the code of the executable file, and the program entry of the global configuration file is correspondingly modified to realize the reconstruction of the executable file, so that when the program is running, the protection code is first executed to perform corresponding decryption Processing directly processes executable files, which increases the flexibility of executable file protection and further improves the security of software installation packages.

Description

Technical field [0001] The invention relates to the field of data security, and in particular to a method and device for strengthening and protecting a software installation package. Background technique [0002] The Android platform has developed rapidly and has gradually become the most popular operating system for mobile terminals. At the same time, the number of software applications based on it is also very large. Compared with other mobile terminal operating systems, the Android system provides more for application developers. Multiple functional interfaces, many of which are at the bottom of the system, improve the scalability of the system, but at the same time provide convenience for malware. Trojan horses targeting Android systems are also easier to implement. Currently there are existing ones targeting Android systems. Malware can be used to pretend to deceive users to install and grant certain permissions, and then abuse these permissions to perform certain actions in...

AI Technical Summary

Problems solved by technology

However, the accompanying security problems have not been well resolved. There are more and more security threats, and the threat level is gradually deepening, which has brought adverse effects on both developers and users.

[0003] Moreover, for some normal Android system applications, there are also threats to the security of the Android system through illegal copying, reverse engineering, decompilation, debugging, cracking, secondary packaging, memory interception, etc., which not only endangers users, but also threatens normal applications. serious damage to the developer

[0004] Based on the above problems, a variety of security reinforcement methods for Android applications have appeared in the prior art, through encryption, anti-decompilation, anti-code confusion and other reinforcement measures for Android applications, but due to the different schemes adopted by the reinforcement methods, the effect of reinforcement It is also different. Some reinforcements cannot achieve the effect of preventing brute force cracking. For example, an existing reinforcement method first encrypts the executable file dex of the original program package, and then extracts the information of the four major components to generate a proxy dex file. When the program is executed Dynamically decrypt the original program dex. However, in this encryption method, the encrypted package is separated from the original package. The original package is only an encrypted file. The program can be easily cracked through memory dump, and the reinforcement effect is limited.

Images