Hidden System APIs Based Code Obfuscation

摘要：

　　For the problem that static disassembly can expose system API calls in programs,this paper proposes a kind of code obfuscation aimed at hiding system API calls from reverse analysis.The algorithm is implemented by creating a system API address table and constructing secret index variables.During execution,the program looks up the table for the correct API to call,thus keeping the semantic unchanged.Analysis and experiments show that the algorithm can effectively protect system API calls from static reverse analysis.

关键词： static disassembly reverse analysis code obfuscation system API address table

作者: Fei Xiang Fenlin Liu Bin Lu Daofu Gong

作者单位: Zhengzhou Information Science and Technology Institute,State Key Laboratory of Mathematical Engineering and Advanced Computing,Zhengzhou, Henan 450002, China

会议类型: 国际会议

会议名称: 2015 International Conference on Mechanical, Electronic and Information Technology Engineering (ICMITE 2015)(2015 机械,电子与信息技术工程国际会议)

会议地点: 重庆

会议语种:英文

页码: 496-502

在线出版日期: 2015-03-02（万方平台首次上网日期，不代表论文的发表时间）