Abstract:
In order to solve the problem that the Android platform application is difficult to perform static code analysis after using the packer service, an automated universal unpack technology was presented. Firstly, a multi-level automated universal unpack system was designed and implemented based on the Android Dalvik virtual machine. And then, a multi-granularity data restoration scheme was proposed to ensure the integrity and validity of data restoration, and to correctly restore the encrypted code content in the packed application. Experiment results show that this system is suitable for mainstream pack services in the market. Evaluating the security of the packed application with this system in the market, more security issues are found in the packed application than in the normal application, which proves the application value of the unpack system.