Method and system for preventing software from being anti-debugged
An anti-debugging and software technology, applied in the field of information security, can solve problems such as increased system overhead, inability to recheck and determine whether memory has been invaded and tampered, and reduced execution efficiency
Inactive Publication Date: 2017-05-10
CHINA TELECOM CORP LTD
View PDF2 Cites 7 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
The protected software process 101 submits memory data to the mapping unit 103 and the anti-mapping unit 104, and returns the output (output) result value of the dongle virtual machine process 102 to the protected software process 101. Injection and anti-tracking protection of process registers and memory addresses, which can still be tracked, debugged, captured, and tampered with by anti-debugging tools
Moreover, since the life cycle of the dongle virtual machine process 102 is less than or equal to the protected software process 101, the Hash feature value of the original execution result cannot be retained, resulting in the inability to recheck and determine whether the memory of the protected software process 101 has been invaded and tampered with. signs, and cannot block the intrusion in time
At the same time, the use of X86 virtual machine protection mode results in reduced execution efficiency and increased system overhead
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0050] The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. The following description of at least one exemplary embodiment is merely illustrative in nature and in no way taken as limiting the invention, its application or uses. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.
[0051] The relative arrangements of components and steps, numerical expressions and numerical values set forth in these embodiments do not limit the scope of the present invention unless specifically stated otherwise.
[0052] figure 2 It is a schematic diagram of an embodiment of a method for pr...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention discloses a method and system for preventing software from being anti-debugged. The method includes that a first anti-debugging-proof module in a server and a second anti-debugging-proof module in a client establish a linkage channel, and then the first anti-debugging-proof module periodically sends an anti-debugging query request to the second anti-debugging-proof module through the linkage channel; the second anti-debugging-proof module queries if there is a debugging behavior or not according to the anti-debugging query request, and sends the query result to the first anti-debugging-proof module through the linkage channel; and the first anti-debugging-proof module determines if operation of software to be protected is abnormal or not, and sends a protection operation indication to the second anti-debugging-proof module through the linkage channel if so, so as to stop any modulation behavior, and then end-to-end linkage safe protection can be achieved. According to the invention, through linkage detection of the client and the server the behaviors that attackers dynamically anti-debug software, crack a protection housing of the software, tamper a program structure and execution data cannot be implemented.
Description
technical field [0001] The invention relates to the field of information security, in particular to a method and system for preventing software from being anti-debugged. Background technique [0002] With the continuous development of computer and intrusion technology, the software industry is growing rapidly while facing more and more threats. In order to protect their own interests and protect scientific research results, technology and copyright from infringement, software developers must prevent cracking of software. Protect. Similarly, with the comprehensive improvement of citizens' security awareness, software users are paying more and more attention to the security and software security of sensitive information such as their own account information, transaction data, and access records generated during the use of purchased software. Effectiveness of anti-debugging protection. [0003] Existing software anti-debugging protection technologies mainly realize program pr...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/14
CPCG06F21/14
Inventor 江家仁
Owner CHINA TELECOM CORP LTD