本文選題：代碼混淆 + 腳本加密��； 參考：《華南理工大學(xué)》2014年碩士論文

【摘要】：隨著軟件產(chǎn)業(yè)的飛速發(fā)展，軟件安全問(wèn)題日益突出，軟件知識(shí)產(chǎn)權(quán)保護(hù)的呼聲變得更加高漲，從而更激起了人們對(duì)軟件保護(hù)技術(shù)的研究熱潮。 防篡改技術(shù)、代碼混淆、軟件加密、軟件水印和數(shù)字指紋等都是目前比較常用的軟件保護(hù)技術(shù)。 代碼混淆技術(shù)是一種保留語(yǔ)義的程序變換技術(shù)，使得變換后的程序和原程序相比在功能和行為上相同或相近，但使變換后的程序復(fù)雜度高、可讀性差，增加了攻擊者分析程序的難度，使攻擊者難以獲取有價(jià)值的信息，，從而達(dá)到保護(hù)軟件的目的。 本文針對(duì)代碼混淆技術(shù)在腳本源程序中的應(yīng)用進(jìn)行作了較為深入的研究，根據(jù)常見(jiàn)的多態(tài)混淆算法設(shè)計(jì)原理，證明了基于腳本的混淆算法的等價(jià)性，并提出了面向PHP腳本語(yǔ)言的多態(tài)混淆算法實(shí)現(xiàn)方案。在此基礎(chǔ)上，本文又提出了通用的基于腳本加密的代碼自動(dòng)混淆系統(tǒng)框架模型，并給出了代碼混淆系統(tǒng)的形式化描述，該混淆系統(tǒng)主要包括用戶接口模塊、預(yù)處理模塊、混淆算法管理模塊及混淆算法執(zhí)行模塊四部分組成，此系統(tǒng)實(shí)現(xiàn)了混淆算法的集中管理及動(dòng)態(tài)選擇調(diào)用的功能。為了深入分析混淆轉(zhuǎn)換的性能指標(biāo)，本文擬分別從轉(zhuǎn)換的正確性、多態(tài)性、可讀性、隱蔽性、額外執(zhí)行開(kāi)銷(xiāo)和不確定度進(jìn)行了理論分析和實(shí)驗(yàn)測(cè)試，重點(diǎn)對(duì)程序不確定度作了詳細(xì)研究，給出了程序不確定度測(cè)量的數(shù)學(xué)計(jì)算方法和具體實(shí)現(xiàn)方案。 本文可為基于腳本的多態(tài)混淆算法的進(jìn)一步研究提供參考。
[Abstract]:With the rapid development of software industry, the problem of software security is becoming more and more prominent, and the voice of the protection of software intellectual property has become more and more high, which arouses people's research upsurge of software protection technology.
Tamper proofing, code obfuscation, software encryption, software watermarking and digital fingerprinting are commonly used software protection technologies.
Code obfuscation technology is a program transformation technology that preserves semantics, making the transformed program the same or similar in function and behavior compared with the original program, but it makes the transformed program with high complexity and poor readability, which increases the difficulty of the attacker to analyze the program, and makes it difficult for the attacker to obtain valuable information so as to achieve the protection software. The purpose.
In this paper, the application of code obfuscation technology in the script source program is deeply studied. According to the common design principle of polymorphic confusion algorithm, the equivalence of the confusion algorithm based on the script is proved, and the implementation scheme of polymorphic confusion algorithm oriented to the PHP script language is proposed. On this basis, this paper also puts forward the general purpose. The framework model of code automatic confusing system based on script encryption is presented, and the formal description of the code confusion system is given. The confusion system mainly consists of four parts: user interface module, preprocessing module, confusion algorithm management module and confusion algorithm execution module. The system realizes the centralized management and dynamic selection of confusion algorithm. In order to analyze the performance index of confusing conversion in depth, this paper makes a theoretical analysis and experimental test on the correctness, polymorphism, readability, concealment, additional execution overhead and uncertainty of the conversion, and focuses on the detailed study of the uncertainty of the program, and gives the mathematical calculation method of the measurement of the program uncertainty and the method of calculating the uncertainty of the program. Specific implementation scheme.
This paper can provide a reference for further research on script based polymorphic confusion algorithm.

【學(xué)位授予單位】：華南理工大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP309.7

【參考文獻(xiàn)】

相關(guān)期刊論文 前4條

1 王一賓;陳意云;;代碼迷惑技術(shù)研究進(jìn)展[J];吉林大學(xué)學(xué)報(bào)(信息科學(xué)版);2008年04期

2 李曉翔,王淑華,趙正校;PPM壓縮算法在圖像壓縮中的應(yīng)用[J];計(jì)算機(jī)工程;2002年07期

3 霍建雷;范訓(xùn)禮;房鼎益;;Java標(biāo)識(shí)符重命名混淆算法及其實(shí)現(xiàn)[J];計(jì)算機(jī)工程;2010年01期

4 史揚(yáng),曹立明,王小平;Java混淆器的設(shè)計(jì)與實(shí)現(xiàn)[J];計(jì)算機(jī)應(yīng)用;2004年11期

本文編號(hào)：1847409