【摘要】：隨著智能終端的飛速發(fā)展,移動應用深入人們的生活當中,同時移動應用所面臨的安全問題也日趨嚴重,已經(jīng)成為信息安全領域關注的新重點。在移動應用安全的解決方案當中,密碼算法仍然是核心技術,但密碼算法在移動終端的使用過程中面臨著諸多的困境。白盒密碼理論的提出為解決這一問題提供了新思路,但白盒密碼在應用過程中,存在效率低、空間占用大和缺乏實際應用案例等諸多問題,需要研究及解決。本論文主要圍繞白盒密碼理論開展研究,從白盒密碼算法的實現(xiàn)及優(yōu)化和基于白盒密碼的Android應用加固系統(tǒng)的設計與實現(xiàn)兩個方面研究了白盒密碼算法及其在移動應用安全中的問題。主要工作和成果體現(xiàn)在以下兩個方面:1)深入研究白盒密碼算法的實現(xiàn)以及執(zhí)行過程,針對實現(xiàn)中的特點提出相應的算法設計優(yōu)化思路;同時針對整個算法實現(xiàn)提出了系統(tǒng)優(yōu)化方法,最后針對x86平臺以及ARM平臺的特性,使用SSE2指令集以及NEON技術完成指令級優(yōu)化,將Xiao提出的白盒AES算法的執(zhí)行時間效率提升到可實用的范圍以內。2)探討了白盒密碼在移動應用保護中存在的問題,并提出了相應的解決方案,設計并實現(xiàn)了基于白盒密碼算法的Android應用加固系統(tǒng),白盒密碼的應用,提升了被加固應用的安全性。使被加固的應用更好的抵抗靜態(tài)分析以及動態(tài)破解等攻擊。
[Abstract]:With the rapid development of intelligent terminals, mobile applications go deep into people's lives. At the same time, the security problems faced by mobile applications are becoming more and more serious, which has become a new focus in the field of information security. In the solution of mobile application security, cryptographic algorithm is still the core technology, but the cryptographic algorithm is faced with many difficulties in the process of using mobile terminal. The white box cryptography theory provides a new way to solve this problem, but in the application of white box cryptography, there are many problems, such as low efficiency, large space occupation and lack of practical application cases, which need to be studied and solved. This thesis mainly focuses on the white-box cryptography theory. The implementation and optimization of white-box cryptography algorithm and the design and implementation of Android application reinforcement system based on white-box cipher are studied in this paper. The white-box cryptography algorithm and its problems in mobile application security are studied. The main work and achievements are as follows: 1) the implementation and execution process of the white-box cipher algorithm are deeply studied, and the corresponding algorithm design optimization ideas are put forward according to the characteristics of the implementation; At the same time, aiming at the realization of the whole algorithm, the system optimization method is put forward. Finally, according to the characteristics of x86 platform and ARM platform, the instruction level optimization is accomplished by using SSE2 instruction set and NEON technology. The execution time efficiency of the white-box AES algorithm proposed by Xiao is raised to a practical range. 2) the problems existing in the protection of white-box cryptography in mobile applications are discussed, and the corresponding solutions are put forward. The Android application reinforcement system based on white-box cipher algorithm is designed and implemented. The application of white-box cipher improves the security of the strengthened application. The reinforced application is better resistant to static analysis and dynamic cracking.
【學位授予單位】：北京郵電大學
【學位級別】：碩士
【學位授予年份】：2016
【分類號】：TP309

【參考文獻】

相關期刊論文 前6條

1 林婷婷;來學嘉;;白盒密碼研究[J];密碼學報;2015年03期

2 李俠;;Android操作系統(tǒng)安全機制研究[J];電腦知識與技術;2014年06期

3 陳佳康;李暉;王s，

本文編號：2454527