基于控制流隐藏的代码迷惑

摘要

为了保护程序免受恶意攻击，确保软件的安全执行，提出了一种隐藏控制流图压平的代码迷惑方法。在已有的控制流图压平的基础上，引入分支函数和转移函数，建立了加强的压平控制流模型以防静态分析。本方案的安全性更多的是基于数据流，其模型是结构化且可扩展的，难以重构原始控制流图，所使用的单向函数不会静态的泄露任何控制流信息。若要理解程序控制流，攻击者必须对更大的代码段进行分析，能有效的防止静态逆向工程。%In order to protect program from malicious attacks, ensure secure execution of program, a method of code obfuscation for hiding control flow graph flattening is proposed. Construct model of strengthening control flow flattening by introducing branch function and transfer function based on the existing control flow graph flattening to prevent static analysis. The security of this scheme is based more on data flow. The model is structured and extendable, it is difficult to reconstruct the original control flow graph, and the one-way function does not leak any control flow information statically. Attacker must to analyse more code segment to understand the control flow. It can effectively prevent static reverse engineering.