A method and device for program code protection based on llvm

Abstract

The embodiment of the invention provides a program code protection method and device based on LLVM. The method comprises: judging whether a function in a traversed intermediate code file needs to be subjected to complication processing or not, and when the complication processing needs to be carried out, all instructions of the function are stored as a call bit CalSite object; forming a first setby all CallSite objects, and cleaning the first set to generate a second set; and performing complication processing on the function pointed by each CallSite object in the second set to generate a newfunction, and replacing the function pointed by the CallSite object with the new function. According to the method and the device provided by the embodiment of the invention, the LLVM intermediate code file is changed in the compiling period, so that the original function calling in the program code is complicated, the analysis cost of an attacker is increased, the program code protection purposeis achieved, and all languages capable of calling the C language library originally are supported.

Description

technical field [0001] The embodiment of the present invention relates to the technical field of computer security, in particular to an LLVM-based program code protection method and device. Background technique [0002] With the continuous development of science and technology and society, the number of various applications is also increasing rapidly. However, program reverse developers or program reverse products can easily obtain the source code in the application program by decompiling the application program, so that the phenomenon of piracy and repackaging of the application program also emerges endlessly. [0003] In order to increase the difficulty of reverse analysis of the program by program crackers, reduce the cracking speed of the program or prevent the program from being cracked, it is necessary to protect the internal code logic of the program, and in the prior art, most of the solutions are aimed at the java language, and for C There is currently no effective...

AI Technical Summary

Problems solved by technology

However, program reverse developers or program reverse products can easily obtain the source code in the application program by decompiling the application program, which makes the phenomenon of piracy and repackaging of the application program emerge in endlessly

[0003] In order to increase the difficulty of reverse analysis of the program by program crackers, reduce the cracking speed of the program or prevent the program from being cracked, it is necessary to protect the internal code logic of the program, and in the prior art, most of the solutions are aimed at the java language, and for C The language of the language library, there is currently no effective workaround

Images