Program semantic confusion method and system based on natural language processing

Abstract

The invention belongs to the technical field of network security, and particularly relates to a program semantic confusion method and system based on natural language process.The method comprises the steps that firstly, a text sequence used for describing a program execution process is extracted from a flow description text corpus, and a confusion corpus material library with induction and fuzzy functions is constructed; secondly, vectorizing the target program code snippets, selecting text sequences irrelevant to the target program code snippets from the obfuscated corpus material library according to the semantic information as prompt output class codes, and fusing the prompt output class codes to the positions of the target program code snippets; according to the method, the semantic confusion corpus with inductivity and fuzziness is fused into the target code, the confusion code with semantic analysis resistance is generated, understanding of reverse analysts on real functions of a program can be misguided, the code understanding difficulty is increased, legal software can be effectively prevented from being pirated or maliciously tampered, and the method has good application prospects.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a method and system for confusing program semantics based on natural language processing. Background technique [0002] In order to prevent legitimate software from being pirated or maliciously tampered with, software developers generally use software protection technologies such as packing, obfuscation, and encryption to protect software. The core idea of ​​all software protection technologies is to increase the difficulty of software being cracked as much as possible, making it difficult for software crackers to analyze the specific functions, organizational structure, working process and other implementation details of the software in a short time. Code obfuscation is a commonly used software protection method. The functions and behaviors of the programs before and after the obfuscation are consistent. The main purpose is to make it difficult for software ...

AI Technical Summary

Problems solved by technology

[0003] Code obfuscation is a hot issue in the field of network security research at home and abroad. Although many research results have been obtained, including garbage instruction insertion, equivalent instruction replacement, control flow flattening, etc., there are still some restrictions on the actual application effect of code obfuscation and deformation technology. The main problems need to be further studied and resolved: (1) Obvious features of confusion

At present, the existing obfuscation algorithms have the ability to resist static reverse analysis, but while protecting the program, a large number of obfuscation features with fixed patterns will be introduced, which seriously affects the security of the algorithm and causes the application effect of many obfuscation algorithms to decline sharply; (2) The anti-semantic analysis effect of obfuscation algorithm is poor

Anti-semantic analysis has always been a difficult point in the design of obfuscation algorithms. Although existing obfuscation algorithms have a certain resistance to static disassembly, symbol execution, behavior monitoring, and dynamic debugging, with the introduction of concepts and methods such as mixed execution and obfuscation analysis, dynamic and static Combined reverse methods, especially specialized manual analysis, bring great challenges to code obfuscation algorithms

On the whole, traditional code obfuscation protection methods have been difficult to cope with the rapid development of software reverse analysis and cracking methods, and it is urgent to explore new software protection ideas and methods

Images