Android application protection method based on code sinking and residual code interpretation

Abstract

The invention discloses an Android application protection method based on code sinking and residual code interpretation, which includes: searching for key methods that need to be protected in the dex file, including key code segments that need to be protected by code reflection sinking technology and the need for diversity Virtually interpret the key code segments protected by Dex residual code technology; convert the key code segments that need to be protected by code reflection sinking technology into Native types and JNI reflection translation operations, and compile them into interpretive so files; virtually interpret the residual code that requires diversity Instructions are extracted for the protected key code segments, diversity virtualization is performed after preprocessing, the processing results are stored in custom files, the local layer CPP file is compiled and run, and finally an interpretive so file is formed; the two so files are loaded and connected, and the application When the program is loaded and running, the interpreted so file replaces the execution of the key code segment. The present invention combines two different protection methods, which greatly improves the attack threshold of attackers and increases the reverse cost.

Description

technical field [0001] The invention belongs to the technical field of Dex file reinforcement in Android applications, and specifically relates to an Android APP protection method based on the combination of Java layer code sinking and diverse virtual interpretation of Dex residual codes. Background technique [0002] In recent years, as the market share of Android mobile phones continues to increase, the subsequent security problems have become more and more severe, and the problem of secondary packaging is particularly serious. There are endless cases of privacy leakage, fund theft, and traffic consumption caused by secondary packaging, which have brought huge losses to developers and users. [0003] Android programs are mostly developed by Java as the native language, so it is particularly important to protect the classes.dex files compiled by the Java language in Android applications. file) protection methods include: Dex overall encryption technology, class loading enc...

AI Technical Summary

Problems solved by technology

The attack test experiment shows that the protection method we propose can effectively prevent the attacks of current reverse engineering tools at the expense of acceptable performance overhead, and most static and dynamic reverse analysis can not achieve the corresponding effect and effect

Images