一种面向应用需求的代码保护方法

摘要

为了防止攻击者对编译后可执行代码进行读取分析和篡改,提出了一种基于编译器分析的软硬件相结合的保护框架.首先对具体应用需求进行分类(数据重要型和算法重要型),然后提取分类后的关键代码块,生成带标记的二进制代码,最后综合数字签名(RSA)和(AES)加解密算法对标记信息进行相应处理,并将其加载到FPGA进行校验运行.实验分析显示,该方法具有较好的可操作性和可维护性,既减小了软件保护的开销,降低了系统实现成本,又达到了保护目的.%Based on compiler analysis and combining handware and software,this paper put forward a protected framework in order to prevent attackers to read,analyse and tamper the compiled executable code when the process compiler compiles the source code. Firstly,classifying specific application requirement(data important and algorithm important). then extracting key code block and generating marked binary code after classification, synthesizing the advantage of digital signature(RSA) and (AES) encryption and decryption algorithm, employing digital signature and encryption to encrypt block marked information, finally loading it to FPGA to verify and run. The experimental analysis show that the method has good maneuverability and maintainability, can reduce the software protection costs and system implement cost,and reach the purpose of protection.