Research And Implementation About The Software Protection And Analysis Technology

Software security protection and analysis technology has become an important field of computer security research topics. From the positive and the negative, this paper has studied and summarized the today's mainstream software protection and analysis technology. On this basis, this paper has designed a software protection mechanism and models to protect the windows PE files. The protection mechanism uses popular software protection and encryption technology, such as code obfuscation, compression-encryption, junk code, anti-debugging anti-tracking etc. According to practical test, after using the protection mechanism, there are a better result against the static analysis and dynamic tracing debugging.In addition, based on the research and summary of mainstream software analysis technology, this paper proposed a method that use the ida-plugins to support the software analysis, and use of "minimum product of prime numbers" to sign the basic blocks of the funcions in the executable file. This approach improves software analysis'efficiency and accuracy greatly. Using of the ida-plugins, we can store the analysis information in the database to view at any time. This method can greatly reduce the cost of futher manual analysis and lay a solid foundation for the development of the automated analysis tools.