Source code hardening method and device based on finite state machine and symbolic execution

Abstract

This application discloses a source code reinforcement method and device based on finite state machine and symbolic execution. The method includes: based on the jump logic of the original source code of the application program when compiling or running, converting the original source code according to the jump logic code The location is split into multiple code blocks, and different states are set for each code block; based on the state of the code block and the jump logic in the code block, the code block jump state machine is determined, and the code block jump state machine is used to represent The jump relationship between each state corresponding to each code block; the jump logic in the code block is realized through the code block jump state machine, and the first source code after reinforcement is obtained; the target to be protected in the first source code is determined variable; insert at least one intermediate variable in the first source code, and the intermediate variable is used to access the target variable; replace part of the target variable in the first source code with any intermediate variable to obtain the reinforced second source code. It can improve the anti-reverse analysis ability of the source code.

Description

technical field [0001] The present application relates to the field of computer technology, in particular to a source code hardening method and device based on finite state machines and symbolic execution. Background technique [0002] With the rapid development of technologies such as the mobile Internet, the Internet of Things, and the Internet of Vehicles, various applications have greatly facilitated people's lives. What follows is that various applications are easily cracked and tampered with, and thus face the risk of important information leakage. [0003] At present, attackers often use static analysis tools such as symbolic execution models to reverse-analyze and crack the source code of the application to obtain the execution logic of the application, thereby illegally stealing and illegally tampering with important information generated during the running of the application. [0004] In view of the above risks, existing technologies often obfuscate the source cod...

AI Technical Summary

Problems solved by technology

[0006] The embodiment of the present application provides a source code hardening device based on finite state machine and symbolic execution, which is used to solve the problem of low security of application programs in the prior art

Images