A source code obfuscation method and device based on symbolic execution

Abstract

This application discloses a source code obfuscation method and device based on symbolic execution, which can determine the target variable to be protected in the source code to be obfuscated; insert at least one intermediate variable in the source code, and the at least one intermediate variable is used to access The target variable; replace part of the target variable in the source code with any intermediate variable. Since some target variables are replaced by intermediate variables, the purpose of blurring and confusing the target table variables in the source code can be achieved, and the corresponding relationship between the target variable and the memory storage location can be blurred and confused, giving the attack Or cause the illusion that the storage location where the target variable is originally stored in the memory is the storage location where the intermediate variable is stored. Since the variable that the attacker is interested in is the target variable that needs to be protected rather than the intermediate variable, the attacker can be deceived not to analyze the target variable indirectly represented by the intermediate variable, and finally improve the anti-reverse analysis capability of the source code.

Description

technical field [0001] The present application relates to the technical field of software security, in particular to a source code obfuscation method and device based on symbolic execution. Background technique [0002] Nowadays, with the rapid development of technologies such as the mobile Internet, the Internet of Things, and the Internet of Vehicles, the number of terminals is increasing, and more and more applications are installed in the terminals, which brings great convenience to people's work and life . Some important information will be generated during the running of the application, which arouses the great interest of the attackers, which makes the important information have the risk of being leaked. [0003] At present, attackers often use static analysis tools such as symbolic execution models to reverse-analyze and crack the source code of the application to obtain the execution logic of the application, thereby illegally stealing and illegally tampering with ...

AI Technical Summary

Problems solved by technology

However, existing source code obfuscation methods such as control flow flattening still have the risk of being cracked, and the ability to prevent reverse analysis of source code needs to be improved

Images