Research And Implementation Of Low-cost Software Anti-reverse

With the development of the software industry,the software reverse problem is becoming more and more important.Software protection technology is also endless,Such as virtual machine protection technology,shell protection technology,API protection technology,anti-debugging protection technology etc.These protection technologies are generally divided into two categories,One is the use of encryption algorithms or changes in program structure to make the program becomes extremely complex,obscure,causing distress to reverse analyst during the reverse program,thus achieve the purpose of the protection process.The other against the reverse analysis method used in the information and methods for targeted protection.The first type of method protects against large but often prone to a greater impact on the performance of the program,the second type of method does not have a large impact on the program,but its existence is easy to be removed.In view of these problems,this paper proposes a low-cost anti-reverse analysis method,which consists of two specific methods,anti-taint analysis and Implicit anti-debugging.They are designed for critical processes in reverse analysis and improve the anti-reverse analysis capability of the program without causing significant loss of program performance.For the reverse analysis based on the program data flow to obtain the program control flow this part of the design of the anti-stain analysis method,Through the three technologies to achieve the bleaching of bleaching data,can effectively protect the program sensitive data is not tracked,and further protect the program data stream information,so that the target program to enhance the ability to reverse.The implicit anti-debugging method is proposed for the problem that the anti-debugging is easy to be removed.The debugging information of the program is combined with the running information.Because it hides the characteristics of the anti-debugging method,to find and remove the difficulty of anti-debugging is enhanced.Both of these methods do not cause significant performance loss to the program.Finally,according to the method proposed in this paper,a low cost anti-reverse analysis prototype system is realized.It combines the method proposed by this institute to protect the program and improve the anti-reverse ability.Finally,the validity of the method is analyzed by the validity analysis.The experimental results show that the proposed method has better performance.