[Android Application Protection Technology Exploration Series] 2: Anti-decompilation and android Decompilation

[Android Application Protection Technology Exploration Series] 2: Anti-decompilation and android Decompilation

Author: Guo Xiaoxing
Weibo: Guo Xiaoxing's Sina Weibo
Email: allenwells@163.com
Blog: http://blog.csdn.net/allenwells
Github: https://github.com/AllenWell

[How to explore Android Application Protection Technology]

[Android Application Protection Technology Exploration Series]: The beginning of Android Application Protection Technology
[Android Application Protection Technology journey series] 2: Anti-Decompilation
[Android Application Protection Technology journey series] 3: Protection against static analysis
[Android Application Protection Technology Exploration Series] 4: Protection against dynamic debugging
[Android Application Protection Technology Exploration Series] 5: Protection against recompilation

For the profit model of Android apps, apps are generally released for free and then made money through advertisements. apps do not have any authorized access mechanisms to protect them, anyone who wants to reverse analyze the application can download it online directly. That is to say, we cannot guarantee the security of the application through the publishing channel, so we can only start with protecting the application code.

Anti-decompilation means that the APK file cannot be decompiled by tools such as APKTool, BakSmail, and dex2jar, or the correct disassembly Code cannot be obtained after decompilation.

The idea of The Decompilation tool is to find out the defects of the decompilation tool when processing the APK or DEX file, and then use it in your own program, invalidates the decompilation tool in processing these specially crafted APK or DEX files.

Methods against decompilation tools

• Read The Decompilation tool source code: analyze the source code structure and find out the defects of the decompilation tool.
• Stress Testing: collects a large number of APK files of different sizes, compiles batch files for stress testing, observes the error information of decompilation, and finds out the defects of the decompilation tool.

Copyright Disclaimer: This article is an original article by the blogger and cannot be reproduced without the permission of the blogger.