DEVICE FOR OBFUSCATING CODE AND METHOD FOR SAME

摘要

The present invention relates to an apparatus for code obfuscation and a method thereof. An apparatus for code obfuscation of the present invention includes: an input unit that receives execution codes for android applications; a code analyzer that separates the input execution codes into sensitive codes that needs to be protected from application forgery attack and general codes except for the sensitive codes by analyzing the input execution codes; a dalvik to C code converter that creates native codes by converting the sensitive codes into a C code; an obfuscator that obfuscates the native codes and the general codes; a self code protector that encrypts the obfuscated native codes by adding a tamper-detection code to the obfuscated native codes and then creates self-modified native codes by adding a loading routine; and a code combiner that combines the self-modified native codes with the obfuscated general codes. According to the present invention, it is possible to make reverse engineering relatively difficult and prevent reverse engineering by removing structurized code information that is vulnerable to reverse engineering of a managed code, by reconfiguring the sensitive codes of an application to be obfuscated into a group of CPU commands and by converting the sensitive codes from managed codes into native codes. Further, it is possible to improve resistance against reverse engineering analysis, using a code protection scheme based on self modification and a tamper-detection scheme in order to protect sensitive codes converted into native codes.