Anti-obfuscation system and method for software virtual machine protection

A virtual machine and software technology, applied in the field of information security, to achieve the effect of simplifying rewriting and retaining semantics and functions

Active Publication Date: 2019-01-04
SHANGHAI JIAO TONG UNIV
View PDF1 Cites 7 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

For the programs protected by the commercial software virtual machine vmprotect, the instructions executed by the optimized program are redu

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Anti-obfuscation system and method for software virtual machine protection
  • Anti-obfuscation system and method for software virtual machine protection

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0019] Such as figure 1 As shown, it is a symbolic execution anti-obfuscation system for software virtual machine protection related to this embodiment, including: a program tracking module, a structural analysis module, a semantic analysis module, and an optimization compilation module, wherein: the program tracking module and the structural analysis module Connect and transmit the trace file information generated by program tracking, the structural analysis module is connected with the semantic analysis module and transmits the implementation code information of the instruction set in the software virtual machine, and is connected with the optimization compilation module and transmits the execution sequence information of the virtual machine instructions in the software virtual machine , the semantic analysis module is connected with the optimization compilation module and provides the LLVM IR representation of the software virtual machine instruction set.

[0020] Such as ...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to an anti-confusion system and a method for software virtual machine protection. After a program is traced and a tracing file is obtained, a heuristic analysis strategy is adopted to analyze a trace file to obtain a software virtual machine instruction set; then the semantics is extracted from the instruction set of the virtual machine; finally, anti-obfuscation is realizedby rewriting and optimizing compilation. The invention aims at the program protected by the commercial software virtual machine vmprotect, the instructions executed by the optimized program are reduced by 2/3 on average, and the program is easy to be modified, thus overcoming the defect of the prior software virtual machine reverse analysis method.

Description

technical field [0001] The present invention relates to a technology in the field of information security, in particular to a software system and method for de-obfuscating a program protected by a software virtual machine by using a program execution record file to extract program semantics. Background technique [0002] Software obfuscation is a technology that increases the difficulty of software reverse engineering. It is used to protect software copyrights and prevent software from being cracked. The virtual machine protection technology in software obfuscation implements an instruction set and a virtual machine in the program (target program) that needs to be protected. This protection technology converts the instructions in the target program into a series of bytecodes with the same function in the virtual machine. And interpret and execute it through the virtual machine. The program protected by the software virtual machine cannot be analyzed by analysis tools for th...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F21/14G06F9/455
CPCG06F9/45558G06F21/14
Inventor 张媛媛李华懿李卷孺谷大武杨文博张新鹏
Owner SHANGHAI JIAO TONG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products

Browse by: Latest US Patents, China's latest patents, Technical Efficacy Thesaurus, Application Domain, Technology Topic.

© 2024 PatSnap. All rights reserved.Legal|Privacy policy|Modern Slavery Act Transparency Statement|Sitemap