Control Flow Obfuscation Based Protection Method for Android Applications

With the popularization and rapid development of mobile intelligent terminals（MITs）, the number of mobile applications, or apps, has increased exponentially. It is increasingly common for malicious code to be inserted into counterfeit apps, which can cause significant economic damage and threaten th...

Full description

Saved in:
Bibliographic Details
Published in:China communications 2017-11, Vol.14 (11), p.247-259
Main Authors: Peng, Yong, Su, Guanyu, Tian, Bin, Sun, Maohua, Li, Qi
Format: Article
Language:English
Subjects:
Access control
Androids
control flow obfuscation control flow obfuscation
Humanoid robots
Mobile communication
Smart phones
Software
software security
Citations: Items that cite this one
Online Access:Get full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:With the popularization and rapid development of mobile intelligent terminals（MITs）, the number of mobile applications, or apps, has increased exponentially. It is increasingly common for malicious code to be inserted into counterfeit apps, which can cause significant economic damage and threaten the security of users. Code obfuscation techniques are a highly efficient group of methods for code security protection. In this paper, we propose a novel control flow obfuscation based method for Android code protection. First, algorithms to insert irrelevant code and flatten the control flow are employed that minimize the cost of obfuscation while ensuring its strength. Second, we improve the traditional methods of control flow flattening to further reduce the costs of obfuscation. Lastly, the use of opaque predicates is strengthened by establishing an access control strategy, which converts the identification of opaque predicates in the entire program into a graph traversal problem, and thereby increases the strength of the code protection. We did some experiments to evaluate our method, and the results show that the proposed method can work well.
ISSN:1673-5447
DOI:10.1109/CC.2017.8233664