Genetic algorithm based software code obfuscation operation selection method

Abstract

A genetic algorithm based software code obfuscation operation selection method includes: establishing an obfuscation operation module library; disassembling an executable program to be obfuscated, searching CALL, JUMP and XOR code sections in codes from a code entry, and using the CALL, JUMP and XOR code sections as addition positions of obfuscation operations; randomly selecting a plurality of obfuscation operations from the obfuscation operation module library, combining the obfuscation operations, and forming N obfuscation operation allocation manners; and using the genetic algorithm to perform optimization and screening on the formed N obfuscation operation allocation manners, and acquiring the optimal obfuscation operation allocation manner. The method fully considers the program response time and the code obfuscation degree, can perform screening on code obfuscation operations on the executable program, can improve the program response time on the premise of effective and full obfuscation of software code, and can greatly reduce the influence of program obfuscation on the program execution efficiency.

Description

Technical field [0001] The invention belongs to the technical field of information security, and relates to a method for selecting a software code obfuscation operation based on a genetic algorithm. Background technique [0002] With the rapid development of software reverse engineering, after the software is sold, the possibility of being cracked by unauthorized users has increased. Once an attacker usually uses reverse engineering techniques such as static disassembly or dynamic debugging to analyze and crack the executable program of the software , Then, intellectual property rights such as the core algorithm of the software will be stolen, and the software and filling parameter tables may also be tampered with to seek benefits, and even look for security loopholes in the software for opportunities to use. [0003] Software code obfuscation technology is an effective means to prevent software from being cracked by unauthorized users, and it gradually plays an increasingly import...

AI Technical Summary

Problems solved by technology

In the article "Control Flow Obfuscation Algorithm Based on Garbage Code", it was proposed that "when the number of operation modules is too large (greater than a certain value M), the Hash function is used to select the operation module and perform obfuscation operations to limit the number of obfuscation operations. It is a method to reduce the time and space overhead after program obfuscation", but this method is relatively random, and it is still lacking in the optimization selection of the balance between software code performance and obfuscation degree

Images