Reinforcing protection method and device for software installation package

Abstract

The invention provides a reinforcing protection method and device for a software installation package. The reinforcing protection method for the software installation package comprises the steps of extracting a global configuration file and an executable file in the software installation package, analyzing the executable file to obtain first codes, inserting protection codes into the first codes to obtain second codes, encrypting the second codes, modifying the global configuration file according to entry points of the protection codes, and repackaging the modified global configuration file and the executable file to generate a reinforced installation package. According to the technical scheme, the protection codes are directly inserted into the codes of the executable file, program entries of the global configuration file are correspondingly modified, then reconfiguration of the executable file is achieved, and therefore in the program running process, the protection codes are executed first so as to carry out corresponding decryption processing; the executable file is processed directly, so that the flexibility of protection of the executable file is improved, and the safety of the software installation package is further improved.

Description

technical field [0001] The invention relates to the field of data security, in particular to a method and device for strengthening and protecting software installation packages. Background technique [0002] The Android (Android) platform has developed rapidly and has gradually become the most popular operating system for mobile terminals. At the same time, the number of software applications based on it is also very large. Compared with other mobile terminal operating systems, the Android system provides more for application developers. Many functional interfaces, many of which are the underlying interfaces of the system, improve the scalability of the system, but at the same time provide convenience for malicious software. Malware such as Trojan horses targeting the Android system are also easier to implement. Malicious software can deceive users to install and grant certain permissions by disguising, and then abuse these permissions to perform certain actions in the backg...

AI Technical Summary

Problems solved by technology

However, the accompanying security problems have not been well resolved. There are more and more security threats, and the threat level is gradually deepening, which has brought adverse effects on both developers and users.

[0003] Moreover, for some normal Android system applications, there are also threats to the security of the Android system through illegal copying, reverse engineering, decompilation, debugging, cracking, secondary packaging, memory interception, etc., which not only endangers users, but also threatens normal applications. serious damage to the developer

[0004] Based on the above problems, a variety of security reinforcement methods for Android applications have appeared in the prior art, through encryption, anti-decompilation, anti-code confusion and other reinforcement measures for Android applications, but due to the different schemes adopted by the reinforcement methods, the effect of reinforcement It is also different. Some reinforcements cannot achieve the effect of preventing brute force cracking. For example, an existing reinforcement method first encrypts the executable file dex of the original program package, and then extracts the information of the four major components to generate a proxy dex file. When the program is executed Dynamically decrypt the original program dex. However, in this encryption method, the encrypted package is separated from the original package. The original package is only an encrypted file. The program can be easily cracked through memory dump, and the reinforcement effect is limited.

Images