Research And Implementation Of Software Protection Based On Android

Seven years have passed since Google released the first Android system. Because Android system is based on Linux and is open source, it has received extensive attention Since the Android system come out. Android has become one of the world’s most popular mobile phone operating system. Now the number of Android applications grow more and more rapidly, Android security issues become increasingly prominent. The main aspect of the Android security is application security, many applications can easily be cracked, and insert advertisment or malicious code, this not only infringe user’s intellectual property rights, but also may cause information leaks and economic losses.At first, this paper analyses the current threats that Android platform encountering, based on these threats this paper then develops the corresponding protection skill, at last, according to these protection technology this paper designs and implementes a Android application protection system.The primary work is as follows:1. This paper proposes two algorithms of white-box encryption runs in mobile devices, white-box AES and white-box CLEFIA. The use of split keys and added random number reduced the size of white-box lookup table, improved the efficiency of the algorithm, which provide a safe and efficient encryption algorithm for the software encryption method described in the following article.2. In this paper, several methods are proposed aim at the threats faced by the Android operating system, respectively, for different executable files:so(shared object) protection, dex protection. By analyzing the system source code, a custom application loader have been developed, which can release and load data into memory. This loader can prevent attackers from get access to the protected data.3. Finally, based on the technology set forth above, this paper designed and implemented a white-box encryption algorithm based software protection framework. From the followed efficiency and security tests, it can concluded that the protected software has been strongly protected from reverse engineering attacks.