APK reinforcing method and device and APK reinforcing client and server

Abstract

The invention discloses an APK reinforcing method and device and an APK reinforcing client and server. The method includes the steps that Java codes corresponding to at least one method in an APK to be reinforced are obtained; the Java codes corresponding to at least one method are converted into corresponding Native C codes capable of being called in a reflection mode. According to the technical scheme, the Java codes in the APK are converted into the Native C codes capable of being called in the reflection mode, java method call is converted into equivalently grammatical Native C method call, when one method is called, the Native C codes are called instead of the original Java codes; compared with the Java codes, the reverse Native C codes are higher in cost, many protection modes of the Native C codes are provided, the possibility that disassembling analysis is conducted on the APK, and the APK is repackaged and distributed again is lowered greatly, and the security level of the APK is increased.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method and device for strengthening APK, and an APK strengthening client and server. Background technique [0002] The rapid development of the Android system and the rapid growth of devices have produced a large number of third-party applications. Compared with other operating systems, the open source of the Android system provides application developers with more functional interfaces. These functional interfaces are improving The scalability of the system also provides convenience for malicious software. Illegal copying, reverse engineering, decompilation, debugging, cracking, secondary packaging, memory interception and other methods continue to threaten the security of the Android system, not only endangering users, but also It also causes serious damage to normal application developers. [0003] The existing reinforcement schemes for the Android software installation ...

AI Technical Summary

Problems solved by technology

[0002] The rapid development of the Android system and the rapid growth of devices have produced a large number of third-party applications. Compared with other operating systems, the open source of the Android system provides application developers with more functional interfaces. These functional interfaces are improving The scalability of the system also provides convenience for malicious software. Illegal copying, reverse engineering, decompilation, debugging, cracking, secondary packaging, memory interception and other means continue to threaten the security of the Android system, not only endangering users, but also Also cause serious damage to normal application developers

[0003] The existing reinforcement schemes for the Android software installation package are mainly divided into three types: the first is to completely encrypt the Java code of the method to be protected; the second is to deform the Java code of the method to be protected during runtime to prevent Directly restore the complete Java code, the existing method cannot be well customized, this solution needs to do the function of bytecode transformation; the third method is to mix the first two solutions

However, since the above solution has a complete image of the Java code in the memory within a certain period of time when the APK is running, the Java code of the protected method can be completely restored by means of a memory dump. As a result, the existing solution cannot completely solve the Android problem. The security problems faced by the installation package, people have been looking for more effective solutions

Images