Android application software reinforcement protection method based on DexClassloader

An application software and loader technology, applied in the field of information security, can solve the problems of low efficiency of the reinforcement process and the security of the reinforcement program has not been paid attention to, and achieve the effect of preventing java layer Hook, improving security, and improving loading efficiency.

CN106650330AInactive Publication Date: 2017-05-10清创网御(合肥)科技有限公司
4 Cites 14 Cited by

Patent Information

Authority / Receiving Office
CN · China
Current Assignee / Owner
Publication Date
2017-05-10
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention aims to provide a method for realizing Dex memory loading on the basis of a DexClassLoader. An apk (AndroidPackage)) reinforcement operation is carried out on a PC (Personal Computer); a reinforced application is installed, shelled, loaded and started on an Android terminal; and a reinforced dex structure is completely different from the structure of a traditional dex file and can not be successfully decompiled into a source file with readability. A reinforcement scheme successfully protects the confidentiality of key data so as to perform an anti-decompilation effect, a ZjDroil shelling tool is used for carrying out a shelling operation on the reinforced apk, and the source files and the dex fragments of any source apk can not be obtained. A memory loading process provided by the invention performs a good effect on preventing Java layer Hook, and meanwhile, a phenomenon that a dex plaintext appears on a disk and is robbed by an attacker is avoided. Compared with a traditional disk loading way, the method disclosed by the invention is characterized in that safety is greatly improved.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the field of information security and relates to a mobile application software security protection technology, in particular to an improved and optimized application software reinforcement protection method based on a Dex loader under an Android platform. Background technique

[0002] Android applications are compiled from the Java language, and the binary code compiled by the Java language can be easily decompiled. The security of the code is greatly threatened, and it also provides an opportunity for piracy. The attacker downloads a legitimate application, modifies the configuration file by decompiling, or even implants malicious code, then repackages the application with a packaging tool, and finally re-signs the application with his own key and publishes it to the application market. For ordinary mobile phone users, it is difficult to identify such repackaged applications, and pirated or malicious applications can easily be...

Examples

Embodiment Construction

[0046] The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0047] like figure 1 As shown, an embodiment of the present invention provides a Dex loader-based Android application software reinforcement protection method, which includes the following steps:

[0048] S1: Unpack the original application Apk file, get AndroidManifest.xml, classes.dex file and assets, META_INF, libs folder;

[0049] S2: Generate a random key KEY, use the random key KEY to encrypt the Dex file in the Apk w...