【摘要】 bf算法是一种针对静态反汇编的混淆算法,但由于bf函数跳转地址的固定性,很容易被逆向还原.据此提出一种基于bf算法的改进型代码混淆算法,利用bf算法中的垃圾指令重定位bf函数的跳转地址并隐藏二次跳转地址,新算法改进了bf算法中的缺陷,同时提升了bf算法针对静态反汇编的混淆复杂度.实验中对测试样本分别进行基于bf算法的混淆和新算法的混淆并使用静态反汇编工具IDA Pro进行测试,实验数据表明新算法在性能和安全性方面有显著的提升.更多还原

【Abstract】 Code obfuscation was employed to prevent the software reverse analysis and protect the important information effectively by strengthening the restore difficult.bf(branch function)algorithm is obfuscation algorithm effective for the static disassembly,but the bf jump is a constant address,so it is easy to be restored.The proposed algorithm based on the bf algorithm improved the defect and enhanced the confusing complexity for the static disassembly,reusing the junk instruction to relocate the bf function jump address and hide the second jump address.In the experiment,the test samples were obfuscated by bf algorithm and the proposed algorithm separately and the static disassembly tool IDA Pro was used for testing,the experimental results show that the new algorithm has significantly improvement in performance and security.更多还原