一种多层次的自动化通用Android脱壳系统及其应用

Design and Application of a Multi-Level Automated Universal Unpack System on Android Platform

  • 摘要: 为解决Android平台应用程序使用加壳服务后难以进行静态代码分析的问题,研究应用程序自动化通用脱壳技术.在Android Dalvik虚拟机的基础上,设计并实现了一种多层次的自动化通用脱壳系统,提出了多粒度的数据还原方案,保证数据还原的完整性和有效性,能正确还原出加壳应用中被加密的代码内容.实验表明,该系统适用于市面上主流的加壳服务.利用该系统,对市场上被加壳的应用程序进行安全性评估,发现加壳应用比未加壳应用存在更多的安全问题,证明了脱壳系统的实际应用价值.

     

    Abstract: In order to solve the problem that the Android platform application is difficult to perform static code analysis after using the packer service, an automated universal unpack technology was presented. Firstly, a multi-level automated universal unpack system was designed and implemented based on the Android Dalvik virtual machine. And then, a multi-granularity data restoration scheme was proposed to ensure the integrity and validity of data restoration, and to correctly restore the encrypted code content in the packed application. Experiment results show that this system is suitable for mainstream pack services in the market. Evaluating the security of the packed application with this system in the market, more security issues are found in the packed application than in the normal application, which proves the application value of the unpack system.

     

/

返回文章
返回