Software integrity checking systems and methods
This disclosure relates to systems and methods generating and distributing protected software applications. In certain embodiments, integrity checking mechanisms may be implemented using integrity checking code in software code prior to compilation into machine code. Following compilation and execution of the application, the introduced code may check the integrity of the application by determining whether the application behaves and/or otherwise functions as expected. By introducing integrity checking in this manner, integrity checking techniques may be injected into the application prior to compilation into machine code and/or independent of the particular manner in which the application is compiled.
1. A method for verifying the integrity of an application performed by a user device comprising a processor and a non-transitory computer-readable medium storing instructions that, when executed by the processor, cause the processor to perform the method, the method comprising:
receiving the application from an application store system, the application comprising one or more functional integrity checks;
receiving a request to perform an initial execution of the application;
in response to receiving the request to perform the initial execution of the application:
executing the one or more functional integrity checks of the application to verify that one or more portions of the application associated with the one or more functional integrity checks function according to a defined behavior, wherein executing the one or more functional integrity checks comprises verifying that one or more resource calls associated with the one or more portions of the application correspond with an expected resource call behavior;
generating, based on verifying that the one or more portions of the application function according to the defined behavior, one or more first integrity check values;
storing the one or more first integrity check values on the user device; and
allowing, based on the verifying that the one or more portions of the application function according to the defined behavior, the initial execution of the application to proceed.
2. The method of claim 1 , wherein the one or more resource calls comprise one or more function calls and the expected resource call behavior comprises an expected function call behavior.
3. The method of claim 1 , wherein the one or more functional integrity checks comprise code appended to the application.
4. The method of claim 1 , wherein the one or more functional integrity checks comprise code injected into a plurality of locations in the application.
5. The method of claim 1 , wherein the one or more functional integrity checks comprise obfuscated code.
6. The method of claim 1 , wherein the request to perform an initial execution of the application comprises a request to install the application on the user device.
7. The method of claim 1 , wherein storing the one or more first integrity check values on the user device comprises storing the one or more first integrity check values in a secure storage space of the user device.
8. The method of claim 1 , wherein storing the one or more first integrity check values on the user device comprises inserting the one or more first integrity check values in one or more locations of the application.
9. The method of claim 1 , wherein the application further comprises one or more comparison integrity checks.
10. The method of claim 9 , wherein the one or more first integrity check values comprise at least one result of a first operation performed on at least one portion of the one or more portions of the application.
11. The method of claim 10 , wherein the first operation comprises a hashing operation and the one or more first integrity check values comprise one or more hash values.
12. The method of claim 10 , wherein the method further comprises:
receiving a request to perform a subsequent execution of the application; and
in response to receiving the request to perform the subsequent execution of the application, executing the one or more comparison integrity checks.
13. The method of claim 12 , wherein executing the one or more comparison integrity checks comprises:
generating one or more second integrity check values;
determining that the one or more second integrity check values match corresponding values of the one or more first integrity check values; and
allowing, based on determining that the one or more second integrity check values match corresponding values of the one or more first integrity check values, the subsequent execution of the application to proceed.
14. The method of claim 13 , wherein generating the one or more second integrity check values comprises performing a second operation on the at least one portion of the one or more portions of the application.
15. The method of claim 14 , wherein the one or more first integrity check values and the one or more second integrity check values comprise hash values, and wherein determining that the one or more second integrity check values match corresponding values of the one or more first integrity check values comprises comparing the hash values.
16. The method of claim 1 , wherein the application is compiled by the application store system.