A reinforcement protection method, server and system for Android applications

Abstract

The invention discloses a reinforcement protection method, sever and system for android app. The method comprises the following steps: obtaining an initial android package APK of the android app; decompiling the initial APK, extracting protected method codes from the initial APK, and filling an extraction position with nop; encrypting the extracted protected method codes according to an appointed encryption and decryption strategy to generate a reinforcement configuration file; adding the appointed encryption and decryption strategy, the reinforcement configuration file and a reinforcement protection program into the decompiled APK, and compiling to generate a reinforcement APK of the android app. According to the technical scheme provided by the invention, protected methods can be dynamically encrypted and decrypted, and complete dex mapping does not exist in a memory at any moment, so that a complete dex file is prevented from being obtained in a memory dump manner and the probability of repacking and redistribution of the android app due to reverse analysis is greatly reduced.

Description

technical field [0001] The invention relates to the field of data security, in particular to a method, server and system for strengthening and protecting Android applications. Background technique [0002] The rapid development of the Android system and the rapid growth of devices have produced a large number of third-party applications. Compared with other operating systems, the open source nature of the Android system provides application developers with more functional interfaces. These functional interfaces are improving. The scalability of the system also provides convenience for malware. Illegal copying, reverse engineering, decompilation, debugging, cracking, secondary packaging, memory interception and other means continue to threaten the security of the Android system, not only harming users, but also It also causes serious damage to normal application developers. [0003] The existing Android software installation package reinforcement solutions are mainly divided...

AI Technical Summary

Problems solved by technology

[0002] The rapid development of the Android system and the rapid growth of devices have produced a large number of third-party applications. Compared with other operating systems, the open source of the Android system provides application developers with more functional interfaces. These functional interfaces are improving The scalability of the system also provides convenience for malicious software. Illegal copying, reverse engineering, decompilation, debugging, cracking, secondary packaging, memory interception and other means continue to threaten the security of the Android system, not only endangering users, but also Also cause serious damage to normal application developers

[0003] The existing reinforcement schemes for the Android software installation package are mainly divided into three types: the first is to completely encrypt the entire dex file; the second is to deform the bytecode of the dex file during runtime to prevent direct Dump of the complete dex , the existing methods cannot be customized very well. This solution needs to perform bytecode transformation functions; the third method is to mix the first two solutions

However, because the above solution has a complete dex image in the memory for a certain period of time when the APK is running, the protected dex can be completely restored by means of a memory dump. As a result, the existing solution cannot completely solve the security problems faced by the Android installation package. problems, people are always looking for more effective solutions

Images