Safety protection method of application programs and server

Abstract

The invention discloses a safety protection method of application programs and a server. The method comprises following steps: receiving a first application program sent from a client by the server; collecting parameters / instructions of the first application program by the server in order to obtain a second application program such that the second application program can normally operate and enable a reverse tool to exit by fault when the reverse tool is utilized for analyzing the second application program; and sending the second application program to the client by the server.

Description

technical field

[0001] The invention relates to communication technology, in particular to an application program security protection method and server. Background technique

[0002] At present, applications (software) based on mobile platforms (also called mobile operating systems) are more and more widespread, but the security of the applications is poor. Here, the security of the application program mainly means that the application program is decompiled by a reverse tool, and the decompiled code is highly readable, easy to analyze, easy to modify, easy to repackage, and difficult to trace after modification.

[0003] Taking the Android platform as an example, an application program (such as a Java application program) running on a virtual machine (such as a Dalvik virtual machine) is extremely easy to be decompiled by a reverse tool.

[0004] Android is a Linux-based free and open-source operating system primarily used on mobile devices such as smartphones and tablets. ...

Examples

Embodiment Construction

[0078] An application program security protection method provided by the embodiment of the present invention can be implemented in the following manner: by modifying the encryption flag in the application program to deceive the reverse tool, but this security reinforcement method is easy to analyze and restore, and the security is poor , and the reverse modification of the application cannot be traced, and the traceability is poor.

[0079] Another application security protection method provided by the embodiment of the present invention can be implemented in the following manner: the real application program is encrypted, and the shell program decrypts and starts it when running, but the shell program will also be analyzed by the reverse tool , so the security is poor. In addition, this method has strict restrictions on the version and operating environment of the mobile platform, and cannot adapt to multiple versions of the mobile platform, and has poor compatibility.

[008...

technical field

[0001] The invention relates to communication technology, in particular to an application program security protection method and server. Background technique

[0002] At present, applications (software) based on mobile platforms (also called mobile operating systems) are more and more widespread, but the security of the applications is poor. Here, the security of the application program mainly means that the application program is decompiled by a reverse tool, and the decompiled code is highly readable, easy to analyze, easy to modify, easy to repackage, and difficult to trace after modification.

[0003] Taking the Android platform as an example, an application program (such as a Java application program) running on a virtual machine (such as a Dalvik virtual machine) is extremely easy to be decompiled by a reverse tool.

[0004] Android is a Linux-based free and open-source operating system primarily used on mobile devices such as smartphones and tablets. ...

Examples

Embodiment Construction

[0078] An application program security protection method provided by the embodiment of the present invention can be implemented in the following manner: by modifying the encryption flag in the application program to deceive the reverse tool, but this security reinforcement method is easy to analyze and restore, and the security is poor , and the reverse modification of the application cannot be traced, and the traceability is poor.

[0079] Another application security protection method provided by the embodiment of the present invention can be implemented in the following manner: the real application program is encrypted, and the shell program decrypts and starts it when running, but the shell program will also be analyzed by the reverse tool , so the security is poor. In addition, this method has strict restrictions on the version and operating environment of the mobile platform, and cannot adapt to multiple versions of the mobile platform, and has poor compatibility.

[008...

Images