摘要
运行态软件常常面临着核心算法被逆向和机密信息被泄漏的严峻威胁,急需研究有效的防动态攻击的软件保护方法.本文包含两方面研究内容:(1)对现有防动态攻击的软件保护方法进行深入分析和综合比较,针对当前主流的防动态攻击的四类保护方法,从实现难度,性能影响和安全性三个指标进行综合对比;(2)通过实例介绍我们在防动态攻击的软件保护方面两项研究工作.分别研究了基于变形引擎的动态软件保护方法和一种安全性增强的虚拟机软件保护方法.
Running software often faces serious threats,for example,the core algorithm is reversed or confidential informa- tion is leaked. So, it is needed to study effective protection methods against dynamic attack. The paper includes two aspects. First, do in-depth analysis and comprehensive comparison of the existing method of software protection against dynamic attacks. According to four mainstream software protection methods against anti-dynamic attack, we do comprehensive comparison of these four protection methods from three indicators of implementation difficulty, performance impact and security. Second, Introduce the work of our two studies in software protection against anti-dynamic attacks through examples. They are a software protection method based on dy- namic deformation engine and a security-enhanced software protection based on virtual machine.
出处
《电子学报》
EI
CAS
CSCD
北大核心
2014年第3期529-537,共9页
Acta Electronica Sinica
基金
教育部科学技术研究重点项目(No.21181)
教育部博士点基金(No.20106101110018)
国家科技支撑计划课题(No.2013BAK02B02)
国家自科学基金(No.61070176,No.61170218,No.61272461,No.61202393)
陕西省科技攻关(No.2011K06-07,No.2012K06-17)
陕西省科技计划(No.2011K06-09)
陕西省教育厅产业化培育项目(No.2011jg06)
陕西省自然科学基础研究计划(No.2012JQ8049)
关键词
白盒环境
防动态攻击
软件保护
虚拟机软件保护
white-box attack enviromnent
anti-dynamic attack
software protection
virtual machine based software ptotection