代码自动混淆技术在脚本源程序加密保护中的应用研究

发布时间：2018-05-05 10:50

本文选题：代码混淆 + 脚本加密　；参考：《华南理工大学》2014年硕士论文

【摘要】：随着软件产业的飞速发展，软件安全问题日益突出，软件知识产权保护的呼声变得更加高涨，从而更激起了人们对软件保护技术的研究热潮。防篡改技术、代码混淆、软件加密、软件水印和数字指纹等都是目前比较常用的软件保护技术。代码混淆技术是一种保留语义的程序变换技术，使得变换后的程序和原程序相比在功能和行为上相同或相近，但使变换后的程序复杂度高、可读性差，增加了攻击者分析程序的难度，使攻击者难以获取有价值的信息，，从而达到保护软件的目的。本文针对代码混淆技术在脚本源程序中的应用进行作了较为深入的研究，根据常见的多态混淆算法设计原理，证明了基于脚本的混淆算法的等价性，并提出了面向PHP脚本语言的多态混淆算法实现方案。在此基础上，本文又提出了通用的基于脚本加密的代码自动混淆系统框架模型，并给出了代码混淆系统的形式化描述，该混淆系统主要包括用户接口模块、预处理模块、混淆算法管理模块及混淆算法执行模块四部分组成，此系统实现了混淆算法的集中管理及动态选择调用的功能。为了深入分析混淆转换的性能指标，本文拟分别从转换的正确性、多态性、可读性、隐蔽性、额外执行开销和不确定度进行了理论分析和实验测试，重点对程序不确定度作了详细研究，给出了程序不确定度测量的数学计算方法和具体实现方案。本文可为基于脚本的多态混淆算法的进一步研究提供参考。
[Abstract]:With the rapid development of software industry, the problem of software security is becoming more and more prominent, and the voice of the protection of software intellectual property has become more and more high, which arouses people's research upsurge of software protection technology.
Tamper proofing, code obfuscation, software encryption, software watermarking and digital fingerprinting are commonly used software protection technologies.
Code obfuscation technology is a program transformation technology that preserves semantics, making the transformed program the same or similar in function and behavior compared with the original program, but it makes the transformed program with high complexity and poor readability, which increases the difficulty of the attacker to analyze the program, and makes it difficult for the attacker to obtain valuable information so as to achieve the protection software. The purpose.
In this paper, the application of code obfuscation technology in the script source program is deeply studied. According to the common design principle of polymorphic confusion algorithm, the equivalence of the confusion algorithm based on the script is proved, and the implementation scheme of polymorphic confusion algorithm oriented to the PHP script language is proposed. On this basis, this paper also puts forward the general purpose. The framework model of code automatic confusing system based on script encryption is presented, and the formal description of the code confusion system is given. The confusion system mainly consists of four parts: user interface module, preprocessing module, confusion algorithm management module and confusion algorithm execution module. The system realizes the centralized management and dynamic selection of confusion algorithm. In order to analyze the performance index of confusing conversion in depth, this paper makes a theoretical analysis and experimental test on the correctness, polymorphism, readability, concealment, additional execution overhead and uncertainty of the conversion, and focuses on the detailed study of the uncertainty of the program, and gives the mathematical calculation method of the measurement of the program uncertainty and the method of calculating the uncertainty of the program. Specific implementation scheme.
This paper can provide a reference for further research on script based polymorphic confusion algorithm.

【学位授予单位】：华南理工大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP309.7

【参考文献】