【摘要】 目前对抗逆向分析最有效的手段为代码虚拟化技术,但是仍旧有许多攻击者通过知识累积、符号执行等手段对代码虚拟化技术进行逆向破解。设计并实现了Muti-Thread-Vmp原型系统。该系统利用多线程实现不同的虚拟化指令,从而让攻击者难以跟踪与分析,提高了代码虚拟化的保护效果。理论分析与实验结果表明,Muti-Thread-Vmp原型系统能够有效地提高攻击者分析的难度。更多还原

【Abstract】 At present, the most effective way to counter reverse analysis is code virtualization technology, but there are still many attackers who use knowledge accumulation, symbol execution and other means to do reverse cracking of the code virtualization technology. The Muti-Thread-Vmp prototype system is designed and implemented. The system uses multiple threads to implement different virtualization instructions, making it difficult for attackers to track and analyze, and improves the protection effect of code virtualization. Theoretical analysis and experimental results indicate that this Muti-Thread-VMP prototype system can effectively improve the difficulty of attacker analysis.更多还原