State, symbol execution and single point logic-based source code enhancement method and apparatus

Abstract

The invention discloses a state, symbol execution and single point logic-based source code enhancement method and apparatus. The method comprises the steps of splitting an original source code into multiple code blocks based on jumping logic of the original source code of an application during compilation or running, and setting different states for the code blocks; based on the states of the codeblocks and the jumping logic in the code blocks, determining a code block jumping state machine; realizing the jumping logic in the code blocks through the code block jumping state machine to obtainan enhanced first source code; determining target variables needed to be protected in the first source code; inserting at least one intermediate variable in the first source code, wherein the intermediate variables are used for accessing the target variables; replacing part of the target variables in the first source code with any intermediate variable to obtain an enhanced second source code; andperforming fuzzy processing on conditional variables in a function of the second source code by using opaque predicates to obtain an enhanced third source code. The anti-reverse analysis capability of the source code can be improved.

Description

technical field [0001] The present application relates to the field of computer technology, in particular to a source code hardening method and device based on state, symbolic execution and single-point logic. Background technique [0002] With the rapid development of technologies such as the mobile Internet, the Internet of Things, and the Internet of Vehicles, various applications have greatly facilitated people's lives. What follows is that various applications are easily cracked and tampered with, and thus face the risk of important information leakage. [0003] At present, attackers often use static analysis tools such as symbolic execution models to reverse-analyze and crack the source code of the application to obtain the execution logic of the application, thereby illegally stealing and illegally tampering with important information generated during the running of the application. [0004] In view of the above risks, existing technologies often obfuscate the source...

AI Technical Summary

Problems solved by technology

[0006] The embodiment of the present application provides a source code hardening device based on state, symbolic execution and single-point logic, which is used to solve the problem of low security of application programs in the prior art

Images