摘要： 为获取并分析采用加壳、控制流混淆技术所产生的隐藏代码，提出一种新的隐藏代码动态捕获方法。利用静态控制流分析算法提取动态捕获点，采用动态二进制插桩技术插入监控代码，在程序的执行过程中实现隐藏代码的执行前分析。实验结果证明，该方法能够减少程序插桩点，有效获取并分析可执行程序中的隐藏代码。
关键词:
隐藏代码,
动态捕获,
控制流分析,
动态二进制插桩,
执行前分析
Abstract: In order to capture and analyze the hidden code produced by shell and control flow obfuscation techniques, this paper proposes a dynamic capture method based on control flow analysis to analyze hidden code. By extracting dynamic capture points with control flow analysis, and inserting monitoring code with dynamic binary instrumentation, it can implement the pre-execution analysis for hidden code. Experimental results show that the method can reduce the number of instrumented program locations, and capture the hidden code for analyzing effectively.
Key words:
hidden code,
dynamic capture,
control flow analysis,
dynamic binary instrumentation,
pre-execution analysis
中图分类号:
刘建林, 王震宇, 蒋烈辉, 谢耀滨, 刘絮颖. 基于控制流分析的隐藏代码动态捕获方法[J]. 计算机工程, 2011, 37(21): 23-25.
LIU Jian-Lin, WANG Shen-Yu, JIANG Lie-Hui, XIE Yao-Bin, LIU Chu-Ying. Dynamic Capture Method for Hidden Code Based on Control Flow Analysis[J]. Computer Engineering, 2011, 37(21): 23-25.