CN114816438B - Method and device for constructing software isomerization development environment - Google Patents

Abstract

The invention belongs to the technical field of network space safety, and particularly relates to a method and a device for constructing a software isomerization development environment, wherein the method comprises the steps of firstly preparing a software isomerization development environment for deployment, wherein the software isomerization development environment is realized based on the expansion of an open source integrated development environment; then deploying a front end of a software development environment, which is responsible for reading user isomerization options; secondly, deploying a back-end software isomerization component, interacting with the front end of the software development environment through a command wrapper, providing a software isomerization function service for a user, and returning a plurality of generated isomerization version files to the user; and finally, performing joint debugging test on the front-end and back-end software isomerization components of the software development environment. The software isomerization development environment designed by the invention supports a plurality of different mainstream programming languages, provides a plurality of deployment modes and provides important support for building the ecological safety industry.

Description

Method and device for constructing software heterogeneous development environment

Technical Field

The present invention belongs to the technical field of cyberspace security, and in particular relates to a method and device for constructing a software heterogeneous development environment.

Background Art

In recent years, due to the "monoculture" in software development and distribution mechanisms, illegal software piracy through reverse engineering and other means has become increasingly serious. In addition, there are often a large number of common vulnerabilities in the currently widely used large-scale distributed systems, which also increases the risk of large-scale attacks. The cost of increasing the heterogeneity of software and enhancing its ability to resist reverse engineering by entrusting software development to different teams is huge.

To address this problem, software heterogeneity technology has been proposed to automatically change the internal interface and structure of the software to generate its unique heterogeneous version, breaking the "monoculturalism" and introducing "multiculturalism" in the software deployment process. Malware is any software designed to run its code on the user's computer to disrupt the operation of the computer or manipulate the system as the attacker wishes. To do this, it requires knowledge about how to interact with the environment and access resources. Software heterogeneity technology changes the internal interface of the software and makes it difficult for malware to master this knowledge. As a result, the malware becomes incompatible with the environment and eventually becomes unable to take effective measures to damage the system. It is an effective defense technology for protecting large-scale distributed systems and reducing the risk of large-scale attacks.

However, there is currently a lack of a development environment for deploying software heterogeneous technology with low application barriers for general developers, and the application of heterogeneous tools is greatly affected by different languages and operating systems, which increases the difficulty for developers to actually use and deploy heterogeneous technology.

Summary of the invention

In view of the defects existing in the prior art, the present invention proposes a method and device for constructing a software heterogeneous development environment. The designed software heterogeneous development environment supports a variety of different mainstream programming languages and provides a variety of deployment modes, providing important support for creating an endogenous security industry ecosystem.

In order to solve the above technical problems, the present invention adopts the following technical solutions:

The present invention provides a method for constructing a software heterogeneous development environment, comprising the following steps:

Prepare for deployment of a heterogeneous software development environment, which is implemented based on the expansion of an open source integrated development environment;

Deploy the software development environment front end, responsible for reading user heterogeneous options;

Deploy backend software heterogeneous components, interact with the software development environment front end through command wrappers, provide users with software heterogeneous functional services, and return several generated heterogeneous version files to users;

Conduct joint debugging and testing on heterogeneous components of the front-end and back-end software in the software development environment.

Furthermore, the preparation work for deploying the software heterogeneous development environment includes: installing gcc, g++, autoconf and automake software, and building the development and execution environment of Go, Python, PHP, JavaScript and Java programming languages.

Furthermore, the software development environment front end provides heterogeneous configuration views of multiple programming languages in the form of software heterogeneous plug-ins, and completes interaction with users through multiple visual controls; at the same time, the software heterogeneous development environment configures an explanation page for each heterogeneous function to illustrate the effect of the function.

Furthermore, the command encapsulator integrates the user's heterogeneous function parameter configuration and the number of software variants in the software heterogeneous plug-in interface into specific command operations, and then calls the backend software heterogeneous component of the corresponding programming language to execute.

Furthermore, according to different types of programming languages, the backend software heterogeneous components include C/C++ heterogeneous components, Python heterogeneous components, Java heterogeneous components, JavaScript heterogeneous components, PHP heterogeneous components and Go heterogeneous components, and each heterogeneous component provides heterogeneous functions for the programming language.

Furthermore, each backend software heterogeneous component is encapsulated as an executable file/script of the heterogeneous component in the corresponding language, and the executable file/script executes the relevant heterogeneous functions and generates a required number of multiple heterogeneous version files.

Furthermore, an intelligent orchestration algorithm is used to configure the best heterogeneous configuration function in the corresponding software heterogeneous plug-in for each programming language.

Furthermore, the software heterogeneity assessment plug-in is used to evaluate the heterogeneous software and obtain the heterogeneous software with the greatest differentiation.

Furthermore, the software heterogeneity evaluation plug-in includes a control flow graph-based evaluation plug-in, a gadgets-based evaluation plug-in and a fuzzy hash function-based evaluation plug-in; the control flow graph-based evaluation plug-in generates a control flow graph of heterogeneous software, and qualitatively analyzes software differences from the differences in nodes and paths of the control flow graph; the gadgets-based evaluation plug-in searches for code snippets gadgets in the software, and quantitatively evaluates software differences by comparing the survival rate of gadgets in heterogeneous software one by one, that is, the number of completely identical gadgets to the total number of gadgets; the fuzzy hash function-based evaluation plug-in extracts local fingerprint information of the software through a hash function and compares it, and quantitatively analyzes the degree of software heterogeneity.

The present invention also provides a software heterogeneous development environment construction device, comprising:

The preparation module is used to prepare for the deployment of the software heterogeneous development environment. The software heterogeneous development environment is implemented based on the expansion of the open source integrated development environment;

The front-end deployment module is used to deploy the front-end of the software development environment and is responsible for reading user heterogeneous options;

The back-end deployment module is used to deploy heterogeneous components of back-end software, interact with the front-end of the software development environment through the command wrapper, provide users with software heterogeneous functional services, and return several generated heterogeneous version files to users;

The test module is used to perform joint debugging tests on the heterogeneous components of the front-end and back-end software in the software development environment.

Compared with the prior art, the present invention has the following advantages:

Currently, there is a lack of a development environment for deploying software heterogeneous technology with low application thresholds for mass developers, and the application of heterogeneous tools is greatly affected by different languages and different operating systems, which increases the difficulty for developers to actually use and deploy heterogeneous. In response to this problem, the present invention proposes a method for constructing a software heterogeneous development environment, which organically integrates code writing, diversified compilation, code deformation and heterogeneous executable body generation, supports multiple different mainstream programming languages such as C, C++, Python, Java, JavaScript, PHP, Go, etc., provides multiple deployment modes, and provides important support for creating an endogenous security industry ecosystem.

BRIEF DESCRIPTION OF THE DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

1 is a schematic diagram of a process of constructing a software heterogeneous development environment according to a first embodiment of the present invention;

2 is a schematic flow chart of a software isomerization method based on C, C++, and Go languages according to Embodiment 2 of the present invention;

3 is a schematic diagram of the flow of a software isomerization method based on Python, PHP, and JavaScript languages according to Embodiment 3 of the present invention;

4 is a schematic diagram of a process flow of a software isomerization method based on Java language according to a fourth embodiment of the present invention;

FIG5 is a schematic diagram of a flow chart of a heterogeneous software evaluation method according to the first embodiment of the present invention.

DETAILED DESCRIPTION

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

Embodiment 1

As shown in FIG1 , the method for constructing a software heterogeneous development environment in this embodiment includes the following steps:

Step S11, preparing for deployment of a software heterogeneous development environment, where the software heterogeneous development environment is implemented based on an open source integrated development environment (IDE) extension;

Step S12, deploying the software development environment front end, responsible for reading the user's heterogeneous options;

Step S13, deploying the backend software heterogeneous component, interacting with the software development environment front end through the command wrapper, providing the user with software heterogeneous functional services, and returning the generated several heterogeneous version files to the user;

Step S14, performing joint debugging test on the front-end and back-end software heterogeneous components of the software development environment.

Specifically, the preparation work for deploying the software heterogeneous development environment includes: installing software such as gcc, g++, autoconf and automake, and building development and execution environments for programming languages such as Go, Python, PHP, JavaScript and Java.

The software heterogeneous development environment of this embodiment is adaptable to a variety of hardware platforms and a variety of operating systems, can provide support for most software development scenarios, and supports a variety of application modes such as IDE and cloud DevOps; in the cloud DevOps mode, the software heterogeneous tool chain can be deployed in the cloud environment in the form of a container, and software heterogeneous services can be provided to the outside through the visual interface of the cloud management platform, integrating the software heterogeneous process into the automated R&D comprehensive management system.

The front end of the software development environment provides heterogeneous configuration views of multiple programming languages in the form of software heterogeneous plug-ins, and interacts with users through multiple visual controls, which greatly reduces the application threshold of software heterogeneous technology. At the same time, an explanation page is configured for each heterogeneous function in the software heterogeneous development environment to explain the effect of the function and help users accurately customize the function combination according to their needs. In IDE mode, the system has the single-step debugging, syntax checking, automatic completion and other functions that traditional IDEs should have, and also has good visual effects and operability.

The software heterogeneity plug-in is implemented based on the plug-in development environment provided by the open source IDE, and the relevant functions of the open source IDE are expanded to provide services to users. The software heterogeneity plug-in has good visual effects and operability. In IDE mode, software heterogeneity can be realized by configuring the function parameters through the visual plug-in interface. Specifically, the software heterogeneity plug-in provides multiple heterogeneity configuration views according to different programming languages. Each heterogeneity configuration view has multiple heterogeneity functions specific to the programming language, specifically supporting multiple code obfuscation methods such as junk code insertion, control flow flattening, fuzzy predicates and equivalent instruction replacement, and multiple memory layout randomization methods such as stack frame layout randomization, register allocation randomization, function list randomization and heap-stack conversion; and supports users to automatically obtain the required number of heterogeneous version files by configuring the specified software diversification generation method, generation strategy, generation quantity and scenario, etc., and supports displaying the effect of each heterogeneity function through prompt information, so that users can understand the principle and effect of each heterogeneity function and provide a good operation interface.

The command encapsulator provides interactive functions for the front-end and back-end in the software heterogeneous development environment, integrates the user's heterogeneous function parameter configuration and the number of software variants in the software heterogeneous plug-in interface into specific command operations, and then calls the back-end software heterogeneous components of the corresponding programming language to execute. Users only need to check the required functions through the heterogeneous configuration view in the front-end of the software development environment and configure the parameters to directly obtain the required heterogeneous version files automatically generated by the back-end software heterogeneous components.

According to different types of programming languages, the backend software heterogeneous component is divided into multiple independent heterogeneous component modules, including C/C++ heterogeneous component, Python heterogeneous component, Java heterogeneous component, JavaScript heterogeneous component, PHP heterogeneous component and Go heterogeneous component, each of which can provide heterogeneous functions for the programming language. Each backend software heterogeneous component is encapsulated as an executable file/script of the heterogeneous component of the corresponding language, and the executable file/script executes the relevant heterogeneous functions and generates multiple heterogeneous version files as required by the user.

Furthermore, the C/C++ heterogeneous component is used to perform heterogeneous processing such as stack frame layout randomization, control flow flattening, global variable randomization, null instruction insertion, string encryption, basic block segmentation, instruction replacement, etc. on C/C++ projects to generate several heterogeneous versions of executable files; the Go heterogeneous component is used to perform heterogeneous processing such as stack frame layout randomization, control flow flattening, global variable randomization, null instruction insertion, string encryption, basic block segmentation, instruction replacement, etc. on Go language projects to generate several heterogeneous versions of executable files; the Python heterogeneous component is used to perform heterogeneous processing such as junk code insertion, code compression, code encryption, name conversion, etc. on Python files to generate several heterogeneous versions of Python files; the PHP heterogeneous component is used to perform Heterogeneous processing such as name conversion, code block shuffling, loop conversion, IF conversion, string conversion, control flow flattening, code encryption, etc. is used to generate several heterogeneous versions of PHP files; JavaScript heterogeneous components are used to perform heterogeneous processing such as string conversion, control flow flattening, variable renaming, code compression, setting target environment, junk code insertion, source file mapping code encryption, etc. on JavaScript files to generate several heterogeneous versions of JavaScript files; Java heterogeneous components are used to perform heterogeneous processing such as name conversion, control flow flattening, string encryption, internal class removal, digital obfuscation, hardware binding, etc. on Java compiled class files and JAR files to generate several heterogeneous versions of class files or JAR files.

Preferably, the best heterogeneous function is configured in the corresponding software heterogeneous plug-in for each programming language using an intelligent arrangement algorithm, and the user can also modify the configuration as needed to customize the corresponding heterogeneous function configuration. The backend software heterogeneous component randomly generates several different heterogeneous function configuration schemes, and generates several heterogeneous version files according to different heterogeneous schemes, and evaluates them to obtain the optimal heterogeneous file according to user needs.

Heterogeneous software is evaluated by using a software heterogeneity evaluation plug-in to obtain heterogeneous software with the greatest differentiation; the software heterogeneity evaluation plug-in includes a control flow graph-based evaluation plug-in, a gadgets-based evaluation plug-in and a fuzzy hash function-based evaluation plug-in; the control flow graph-based evaluation plug-in generates a control flow graph of heterogeneous software and qualitatively analyzes software differences from the differences in nodes and paths of the control flow graph; the gadgets-based evaluation plug-in searches for code fragments gadgets in the software and quantitatively evaluates software differences by comparing the survival rate of gadgets in heterogeneous software one by one, that is, the number of completely identical gadgets accounts for the total number of gadgets; the fuzzy hash function-based evaluation plug-in extracts local fingerprint information of the software through a hash function and compares it to quantitatively analyze the degree of software heterogeneity.

As shown in Figure 5, the heterogeneous software evaluation method includes the following steps:

Step S51, the software development environment front end reads the heterogeneous software that the user needs to compare;

Step S52, based on the control flow graph evaluation plug-in, by analyzing the binary software, the control flow graph of the binary program can be extracted and displayed, and the control flow graph differences can be compared through nodes and paths;

Step S53, searching for gadgets in the software based on the gadgets evaluation plug-in, comparing gadgets with the same address and content, and calculating the survival rate;

Step S54, evaluating the plug-in based on the fuzzy hash function by using a hash function to give a software difference value;

Step S55, combining the evaluation results of the above three plug-ins to obtain the heterogeneous software with the greatest differentiation.

Corresponding to the above-mentioned method for constructing a software heterogeneous development environment, this embodiment further provides a software heterogeneous development environment construction device, including:

The preparation module is used to prepare for the deployment of the software heterogeneous development environment. The software heterogeneous development environment is implemented based on the expansion of the open source integrated development environment;

The front-end deployment module is used to deploy the front-end of the software development environment and is responsible for reading user heterogeneous options;

The back-end deployment module is used to deploy heterogeneous components of back-end software, interact with the front-end of the software development environment through the command wrapper, provide users with software heterogeneous functional services, and return several generated heterogeneous version files to users;

The test module is used to perform joint debugging tests on the heterogeneous components of the front-end and back-end software in the software development environment.

Embodiment 2

As shown in FIG2 , this embodiment discloses a software isomerization method based on C, C++, and Go languages, comprising the following steps:

Step S21, the software development environment front end reads the user's isomerization options and parses them into isomerization parameters;

Step S22, the C/C++/Go isomerization component compiles the C/C++/Go source program file to be isomerized according to the isomerization parameters;

Step S23, the C/C++/Go heterogeneous component generates a heterogeneous version of an executable file.

Embodiment 3

As shown in FIG3 , this embodiment discloses a software isomerization method based on Python, PHP, and JavaScript languages, comprising the following steps:

Step S31, the software development environment front end reads the user's isomerization options and parses them into isomerization parameters;

Step S32, the Python/PHP/JavaScript isomerization component reads the Python/PHP/JavaScript file to be isomerized and parses it;

Step S33, the Python/PHP/JavaScript isomerization component modifies the Python/PHP/JavaScript file to be isomerized according to the isomerization parameters;

Step S34, the Python/PHP/JavaScript heterogeneous component generates heterogeneous versions of Python/PHP/JavaScript files.

Embodiment 4

As shown in FIG4 , this embodiment discloses a software isomerization method based on Java language, comprising the following steps:

Step S41, the software development environment front end reads the user's isomerization options and parses them into isomerization parameters;

Step S42, the Java isomerization component reads the file to be isomerized (class file, JAR file or War file) and parses its bytecode;

Step S43, the Java isomerization component modifies the bytecode of the file to be isomerized according to the isomerization parameters;

Step S44: the Java isomerization component generates a isomerization version file according to the modified bytecode.

It should be noted that, in this article, the terms "comprises", "includes" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or apparatus that includes a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or apparatus.

Finally, it should be noted that the above is only a preferred embodiment of the present invention, which is only used to illustrate the technical solution of the present invention, and is not used to limit the protection scope of the present invention. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention are included in the protection scope of the present invention.

Claims (8)

1. A method for constructing a software heterogeneous development environment, characterized by comprising the following steps: Step 1: Prepare for the deployment of a software heterogeneous development environment, which is implemented based on the expansion of an open source integrated development environment; Step 2: Deploy the software development environment front end, which is responsible for reading the user's heterogeneous options; Step 3: Deploy the backend software heterogeneous components, interact with the software development environment front end through the command wrapper, provide the user with software heterogeneous functional services, and return the generated heterogeneous version files to the user; The command encapsulator integrates the heterogeneous function parameter configuration and the number of software variants in the software heterogeneous plug-in interface into specific command operations, and then calls the backend software heterogeneous component of the corresponding programming language to execute; each backend software heterogeneous component is encapsulated as an executable file/script of the heterogeneous component of the corresponding language, and the executable file/script executes the relevant heterogeneous function and generates a required number of heterogeneous version files; Step 4: Perform joint debugging and testing on the heterogeneous components of the front-end and back-end software in the software development environment. 2. The method for constructing a software heterogeneous development environment according to claim 1 is characterized in that the preparation work for deploying the software heterogeneous development environment includes: installing gcc, g++, autoconf and automake software, and building development and execution environments for Go, Python, PHP, JavaScript and Java programming languages. 3. According to the method for constructing a software heterogeneous development environment in claim 1, it is characterized in that the software development environment front end provides heterogeneous configuration views of multiple programming languages in the form of software heterogeneous plug-ins, and completes interaction with users through multiple visual controls; at the same time, an explanation page is configured for each heterogeneous function in the software heterogeneous development environment to illustrate the effect of the function. 4. The method for constructing a software heterogeneous development environment according to claim 1 is characterized in that, depending on the type of programming language, the back-end software heterogeneous components include C/C++ heterogeneous components, Python heterogeneous components, Java heterogeneous components, JavaScript heterogeneous components, PHP heterogeneous components and Go heterogeneous components, and each heterogeneous component provides heterogeneous functions for the programming language. 5. The method for constructing a software heterogeneous development environment according to claim 3 is characterized in that an intelligent orchestration algorithm is used to configure the best heterogeneous function in the corresponding software heterogeneous plug-in for each programming language. 6. The method for constructing a software heterogeneous development environment according to claim 1 is characterized in that a software heterogeneous evaluation plug-in is used to evaluate heterogeneous software to obtain heterogeneous software with the greatest differentiation. 7. The method for constructing a software heterogeneous development environment according to claim 6 is characterized in that the software heterogeneous evaluation plug-in includes a control flow graph-based evaluation plug-in, a gadgets-based evaluation plug-in and a fuzzy hash function-based evaluation plug-in; the control flow graph-based evaluation plug-in generates a control flow graph of heterogeneous software and qualitatively analyzes software differences from the differences in nodes and paths of the control flow graph; the gadgets-based evaluation plug-in searches for code fragments gadgets in the software and quantitatively evaluates software differences by comparing the survival rate of gadgets in heterogeneous software one by one, that is, the number of completely identical gadgets accounts for the total number of gadgets; the fuzzy hash function-based evaluation plug-in extracts local fingerprint information of the software through a hash function and compares it to quantitatively analyze the degree of software heterogeneity. 8. A software heterogeneous development environment construction device, characterized in that it is used to implement the software heterogeneous development environment construction method according to any one of claims 1 to 7, and the device comprises: The preparation module is used to prepare for the deployment of the software heterogeneous development environment. The software heterogeneous development environment is implemented based on the expansion of the open source integrated development environment; The front-end deployment module is used to deploy the front-end of the software development environment and is responsible for reading user heterogeneous options; The back-end deployment module is used to deploy heterogeneous components of back-end software, interact with the front-end of the software development environment through the command wrapper, provide users with software heterogeneous functional services, and return several generated heterogeneous version files to users; The test module is used to perform joint debugging tests on the heterogeneous components of the front-end and back-end software in the software development environment.