【摘要】：計算機軟件方便了人們的工作和生活,如何高強度的保護軟件,保障軟件開發(fā)者的合法權(quán)益,促進軟件行業(yè)的健康發(fā)展,是當(dāng)今軟件安全方向的熱點問題。軟件保護虛擬機作為當(dāng)前保護強度高,穩(wěn)定性強的保護技術(shù),已經(jīng)廣泛應(yīng)用于對軟件核心算法的保護,并且獲得了良好的保護效果。其實現(xiàn)原理是將待保護的X86指令,經(jīng)過一套自己設(shè)計的虛擬指令的轉(zhuǎn)化,變成只能由開發(fā)者設(shè)計的虛擬機解釋的字節(jié)碼,使用相應(yīng)的虛擬機自帶的解釋器對該字節(jié)碼進行解釋執(zhí)行。在安全性上,虛擬機解釋器中大量的混淆,虛擬機解釋器自身結(jié)構(gòu)的復(fù)雜性大大增加了逆向人員的工作量。在實際應(yīng)用中,虛擬機保護通常和其他保護手段相結(jié)合,進一步增強了安全性,但是這并不表示軟件保護虛擬機無法攻破。同時,軟件保護虛擬機也存在執(zhí)行效率低,耗費時間長,只能用來保護少量關(guān)鍵核心代碼的缺陷,這使得軟件保護虛擬機的保護范圍有限。本文主要完成了以下工作:(1)首先簡要介紹了軟件保護虛擬機的研究現(xiàn)狀,隨后詳細介紹了軟件保護虛擬機的保護原理和各個部分的作用。并介紹了針對軟件保護虛擬機的攻擊可行性分析。(2)使用OllyScript腳本動態(tài)提取Handler,并將它們進行裁剪,然后用基于FCM模糊聚類算法,將其進行聚類處理,對語義相同或相近的Handler完成自動歸類分析,對程序中識別出來的相同的Handler進行標(biāo)示,從而降低了逆向人員的工作量。最后對方案關(guān)鍵部分進行了簡單的模擬,驗證了方案的可行性。(3)針對軟件保護虛擬機的執(zhí)行效率低的特點,引入了分支預(yù)測的思想,對所有跳轉(zhuǎn)分支進行預(yù)判。然后定量分析了該方案對執(zhí)行效率的影響,給出BPVMP設(shè)計方案的關(guān)鍵部分。最后進行系統(tǒng)模擬,驗證了改進方案的有效性。
[Abstract]:Computer software is convenient for people's work and life, how to protect software with high strength, to guarantee the legitimate rights and interests of software developers, to promote the healthy development of software industry, and is a hot issue in the direction of software security today. As the protection technology with high protection strength and strong stability, the software protection virtual machine has been widely used in the protection of the software core algorithm, and has obtained a good protection effect. The implementation principle is that the X86 instruction to be protected is converted into a byte code which can only be interpreted by the virtual machine designed by the developer through the transformation of a set of virtual instructions designed by the developer, and the byte code is interpreted and executed by using an interpreter provided by the corresponding virtual machine. in security, that complexity of the self-structure of the virtual machine interpreter greatly increases the workload of the reverse engineer. In practical applications, virtual machine protection is usually combined with other protection means to further enhance security, but this does not mean that the software protection virtual machine cannot break. At the same time, the software protection virtual machine also has the defects of low execution efficiency and long time, and can only be used for protecting a small number of key core codes, which makes the protection range of the software protection virtual machine limited. In this paper, the following work is done: (1) Firstly, the research status of the software protection virtual machine is briefly introduced, and the protection principle and the function of each part of the software protection virtual machine are introduced in detail. The feasibility of the attack on the software protection virtual machine is also introduced. and (2) dynamically extracting the Handler by using the OllyScript script, and cutting the Handler, then carrying out clustering processing on the Handler based on the FCM fuzzy clustering algorithm, performing automatic classification analysis on the Handler with the same or similar semantics, marking the same Handler identified in the program, so that the workload of the reverse personnel is reduced. Finally, a simple simulation of the key part of the scheme is carried out, and the feasibility of the scheme is verified. (3) Aiming at the characteristics of low execution efficiency of the software protection virtual machine, the idea of branch prediction is introduced, and all the jump branches are pre-judged. Then the effect of the scheme on the execution efficiency is analyzed, and the key part of the design of the BPVMP is given. and finally, the system simulation is carried out, and the effectiveness of the improved scheme is verified.
【學(xué)位授予單位】：武漢工程大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2016
【分類號】：TP311.5;TP309

【參考文獻】

相關(guān)期刊論文 前2條

1 靳蓓蓓;張仕斌;;可信計算平臺及其研究現(xiàn)狀[J];長春大學(xué)學(xué)報;2007年04期

2 于淼,孫強;對加殼技術(shù)的改進:超粒度混雜技術(shù)[J];計算機應(yīng)用;2004年08期

，

本文編號：2413974