Method and device for protecting APK

Abstract

The invention provides a method and a device for protecting an APK. The method comprises the following steps: an APK file is decompressed to obtain all files in the APK, wherein the files comprise class.dex, lib, META-INFO, AndroidManifest.xml and res, wherein the files comprise Cass.dex, lib, META-INFO, AndroidManifest.xml and res; a so library is encrypted, and an encryption algorithm in a password library is called to encrypt a text field in the so library file; the dex file is encrypted, and the encryption algorithm in the password library is called to encrypt the class.dex file; shell adding and packaging are conducted, specifically, a Dex shell file, the so library, the AndroidManifest.xml file and the META-INFO are packaged into a new APK; and the new APK is signed. Technologies such as a white box algorithm, dex file encryption, so library encryption, security environment detection (root detection, hook detection and dynamic debugging detection), code obfuscation and integrityverification are adopted, so the problems of service logic leakage, privacy data protection, reverse analysis prevention, secondary packaging, tampering, counterfeiting and the like of the Android application are solved.

Description

technical field [0001] The invention belongs to the field of mobile Internet application security protection, and in particular relates to a method and device for protecting APK. Background technique [0002] With the rapid development of the Internet era, especially the development of the mobile Internet, more and more APPs have emerged. These APPs on mobile phones allow people to conveniently purchase various products, convenient and fast payments, and so on. However, with the popularity of APP, the security of APP on mobile phone becomes more and more important. Due to the negligence or knowledge limitations of mobile phone APP developers, each APP has certain security loopholes. Once these loopholes are mastered by malicious users, the harm will be immeasurable. [0003] Although the Android platform itself has a relatively standardized security mechanism, such as the application layer reference signature mechanism and the application permission control mechanism to pro...

AI Technical Summary

Problems solved by technology

However, due to factors such as the open source nature of Android itself and the openness of promotion, the Android platform has certain deficiencies in its own architecture, its security mechanism, and the platform's operating model. Once these problems are exploited by attackers, the interests of users will be violated

And in the future, a single security service can no longer meet the needs of users

Images