本文選題：代碼混淆 + 腳本加密　； 參考：《華南理工大學》2014年碩士論文

【摘要】：隨著軟件產業的飛速發展，軟件安全問題日益突出，軟件知識產權保護的呼聲變得更加高漲，從而更激起了人們對軟件保護技術的研究熱潮。 防篡改技術、代碼混淆、軟件加密、軟件水印和數字指紋等都是目前比較常用的軟件保護技術。 代碼混淆技術是一種保留語義的程序變換技術，使得變換后的程序和原程序相比在功能和行為上相同或相近，但使變換后的程序復雜度高、可讀性差，增加了攻擊者分析程序的難度，使攻擊者難以獲取有價值的信息，，從而達到保護軟件的目的。 本文針對代碼混淆技術在腳本源程序中的應用進行作了較為深入的研究，根據常見的多態混淆算法設計原理，證明了基于腳本的混淆算法的等價性，并提出了面向PHP腳本語言的多態混淆算法實現方案。在此基礎上，本文又提出了通用的基于腳本加密的代碼自動混淆系統框架模型，并給出了代碼混淆系統的形式化描述，該混淆系統主要包括用戶接口模塊、預處理模塊、混淆算法管理模塊及混淆算法執行模塊四部分組成，此系統實現了混淆算法的集中管理及動態選擇調用的功能。為了深入分析混淆轉換的性能指標，本文擬分別從轉換的正確性、多態性、可讀性、隱蔽性、額外執行開銷和不確定度進行了理論分析和實驗測試，重點對程序不確定度作了詳細研究，給出了程序不確定度測量的數學計算方法和具體實現方案。 本文可為基于腳本的多態混淆算法的進一步研究提供參考。
[Abstract]:With the rapid development of software industry, the problem of software security is becoming more and more prominent, and the voice of the protection of software intellectual property has become more and more high, which arouses people's research upsurge of software protection technology.
Tamper proofing, code obfuscation, software encryption, software watermarking and digital fingerprinting are commonly used software protection technologies.
Code obfuscation technology is a program transformation technology that preserves semantics, making the transformed program the same or similar in function and behavior compared with the original program, but it makes the transformed program with high complexity and poor readability, which increases the difficulty of the attacker to analyze the program, and makes it difficult for the attacker to obtain valuable information so as to achieve the protection software. The purpose.
In this paper, the application of code obfuscation technology in the script source program is deeply studied. According to the common design principle of polymorphic confusion algorithm, the equivalence of the confusion algorithm based on the script is proved, and the implementation scheme of polymorphic confusion algorithm oriented to the PHP script language is proposed. On this basis, this paper also puts forward the general purpose. The framework model of code automatic confusing system based on script encryption is presented, and the formal description of the code confusion system is given. The confusion system mainly consists of four parts: user interface module, preprocessing module, confusion algorithm management module and confusion algorithm execution module. The system realizes the centralized management and dynamic selection of confusion algorithm. In order to analyze the performance index of confusing conversion in depth, this paper makes a theoretical analysis and experimental test on the correctness, polymorphism, readability, concealment, additional execution overhead and uncertainty of the conversion, and focuses on the detailed study of the uncertainty of the program, and gives the mathematical calculation method of the measurement of the program uncertainty and the method of calculating the uncertainty of the program. Specific implementation scheme.
This paper can provide a reference for further research on script based polymorphic confusion algorithm.

【學位授予單位】：華南理工大學
【學位級別】：碩士
【學位授予年份】：2014
【分類號】：TP309.7

【參考文獻】

相關期刊論文 前4條

1 王一賓;陳意云;;代碼迷惑技術研究進展[J];吉林大學學報(信息科學版);2008年04期

2 李曉翔,王淑華,趙正校;PPM壓縮算法在圖像壓縮中的應用[J];計算機工程;2002年07期

3 霍建雷;范訓禮;房鼎益;;Java標識符重命名混淆算法及其實現[J];計算機工程;2010年01期

4 史揚,曹立明,王小平;Java混淆器的設計與實現[J];計算機應用;2004年11期

本文編號：1847409