一种用于Android应用的反控制混淆系统

Android恶意软件中的控制混淆技术，可以增加传统Android应用软件执行路径检测的难度，是目前代码静态分析的主要困难之一。针对该问题进行了研究，并设计系统DOCFDroid用于解决此问题。该系统在预处理阶段获取CFG关系矩阵，使用深度优先查找待分析路径集合；依据用户给定的源点集合和终节点集合，得到粗糙路径；然后采用权重筛选的算法，可以有效的获取目标路径集合。在实验阶段以DroidBench 1.2为基础构建测试样本集，验证该方法的有效性。实验结果表明，该方法能有效抵抗控制流混淆带来的干扰，目标路径识别率可达95.31%。

Deobfuscation system for Android applications

Control obfuscation can greatly increase the difficulty on detecting implementation path of Android application, and also is the one of the main difficulties on current code static analysis. This article had carried on the research to this question and designed a system DOCFDroid used to solve this problem. The system obtained the CFG relation matrix in the pretreatment stage, and used the depth-first algorithm to find the set of the path. According to the set of source points and the set of end points, the coarse path was obtained. The algorithm of weight screening could effectively obtain the target path set. Based on the sample set DroidBench1.2, the test sample set was further constructed to verify the validity of this method. The experimental results show that the system can effectively resist the interference caused by control obfuscation, and the recognition rate of target path can reach 95.31%.