This paper details the creation of a code obfuscation framework centered on Non-Linear Mixed Boolean Arithmetic (MBA) and augmented by additional techniques to maximize mitigation against reverse engineering while preserving runtime correctness. Each obfuscation step is applied incrementally to ensure valid code output, with each step building off of the previous. The obfuscation process involves debug-info stripping, identifier renaming, constant and string obfuscation with runtime reconstruction, MBA algebraic rewrites, junk-code generation, control-flow obfuscation, and optional compilation to bytecode executed on a custom virtual machine. Results indicate that combining MBA with traditional obfuscation methods substantially increases the difficulty for static analysis and de-obfuscation while maintaining acceptable runtime overhead.
原文链接
分享
引用
