【24h】

Binary Obfuscation Based Reassemble

机译:基于二进制混淆的重组

获取原文

摘要

Software reverse engineering is the process of retrieving the source code or recovering the higher level structure from an executable binary file. It has a wide range of applications in software analysis, such as vulnerability mining and exploiting, blind patching and so on. But it can also be used for illegal activities such as software piracy and plagiarism, which bring huge losses to relevant workers. So Anti-reverse has important significance for intellectual property protection. In fact, it is difficult to protect a software against being reversed or malicious modifications. In this paper, we present and discuss a new binary obfuscation method based on reassemble. The binary reassembling refers to the process of disassembling an executable binaries into assembly code and assemble it back to a correct binary. We make binary obfuscation in this process because it can avoid many problems and have better protection than other obfuscation methods. We designed two obfuscating schemes including instruction substitution and control flow confusion. The resulting code is still a correct program, but it has more complex instruction execution sequence and sophisticated control flow graph. According to the experiment results, the obfuscated program has more smaller file size but it execute more slowly than the original program.
机译:软件逆向工程是从可执行二进制文件中检索源代码或恢复更高级别结构的过程。它在软件分析中具有广泛的应用,例如漏洞挖掘和利用,盲目修补等。但是它也可以用于非法活动,例如软件盗版和窃,给相关工人带来巨大损失。因此,反反向对知识产权保护具有重要意义。实际上,很难防止软件被逆转或恶意修改。在本文中,我们提出并讨论了一种基于重组的新的二进制混淆方法。二进制重新组装是指将可执行二进制文件分解为汇编代码,然后将其重新组装为正确的二进制文件的过程。我们在此过程中进行二进制混淆处理,因为它可以避免许多问题,并且比其他混淆处理方法具有更好的保护。我们设计了两种混淆方案,包括指令替换和控制流混乱。生成的代码仍然是正确的程序,但是它具有更复杂的指令执行顺序和复杂的控制流程图。根据实验结果,经过混淆的程序具有较小的文件大小,但比原始程序执行得更慢。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号