A method and device for protecting an Android application program based on code fragmentation

Abstract

The invention discloses a method and device for Android application shelling and protection based on code fragmentation. The method first extracts executable files, shared library files, resources and configuration information, etc. from the application to be protected, and then extracts the executable files. The file is code fragmented, encrypted separately, imported into the newly created application package, and the extracted configuration information is added; then the encrypted code fragment is decrypted and independent memory space is allocated, and the decrypted code fragment is repaired and reorganized into an executable file. Prepare the running environment and rebuild the installation package. The method of the present invention has high protection intensity. The executable file of the protected application always exists in the process memory in a fragmented form throughout its life cycle, which greatly reduces the possibility of the complete executable file being stolen by an attacker. It also greatly increases the difficulty of the application being reversed, cracked, repackaged, etc.; it can balance the protection strength and performance overhead.

Description

technical field [0001] The invention belongs to the field of computer software security, and in particular relates to a code fragmentation-based Android application program packing protection method. Background technique [0002] In recent years, with the popularity and popularity of Android smart devices, various Android applications have appeared on the market to meet the needs of users. However, due to the openness of the platform itself, the low threshold of the application market, and the structural characteristics of the application itself, the security problems faced by Android applications are increasing day by day, and problems such as application cracking, reverse engineering, piracy, and secondary packaging are not uncommon. , where the problem of secondary packaging is particularly serious. Studies have shown that most malicious applications are generated by repackaging legitimate applications. [0003] In order to solve these problems faced by Android applicat...

AI Technical Summary

Problems solved by technology

However, like the packing system on the early x86 platform, the current Android packing system also packs the executable file of the application in a complete form, resulting in the threat of being easily stolen from the memory. Once the complete executable is stolen, the attacker can proceed with any attack he wishes

Images