Research Of The Antireversing Engineering Techniques

As the fast development of the computer technology, the computer brings great economic benefit, and then which accelerates the development of computer software and hardware, especially the software development. As a result, the reversing engineering appears aiming at the software engineering. Adopting the reversing engineering, we can easily reverse the program which was not well protected by compile. The antireversing engineering is researched to protect the program and improves its healthy in this paper.The techniques of antireversing engineering and its implement methods are studied in this paper. The main contents are as follows.1. General principle and tools of antireversing engineering are studied, especially introduces the widely used tools are introduced such as OllyDbg, SoftICE, WinDbg, IDA Pro and so on.2. Quoted for reversing engineering, we do some antireversing engineering theoretical research, and get the conclusion that the key of antireversing engineering is to dispose data stream and control stream of programming to delude the debugging software and reversing one. Based on the theory above, the paper discusses the main antireversing engineering techniques, which are discussed including Eliminating Symbolic Information, Code Encryption, Active Antidebugger Techniques, Confusing Disassemblers, Code Obfuscation, Control Flow Transformations, Data Transformations. And two Control Flow Transformations of Opaque Predicates and Table Interpretation, and the Code confusion technique for the popular .NET are especially introduced, which solves the problem that avoiding being reversed through confusing and deluding to the reversing engineering techniques.3. The method that combines analyzes and examples is adopted to do the theory research and do the algorithm discussion, and the example is the basis and easy compile and Inline Assembly. Based on the above, correlative algorithm and techniques are increased. The feasibility of techniques and algorithm are proved by using the common debugging tools, and at last the right conclusion is gotten.