Software protection method and apparatus, electronic device, and storage medium

An electronic device, comprising:

• at least one processor and a memory;
• the memory stores computer executable instructions;
• and
• the at least one processor executes the computer executable instructions stored in the memory, enables the at least one processor to:
• identify sensitive data created during a compilation process and determine a point of use of the sensitive data, wherein the sensitive data is operands of sensitive operations recognized by the compiler, the sensitive operations comprise program counter update, a sensitive application programming interface (API) call, a security check and a business-critical operation, wherein the business-critical operation comprises transferring and password decryption;
• set the sensitive data in a read-only section of a compilation product of a software source code, so that the sensitive data is stored in a read-only area when a software is running;
• and
• insert a check code at the point of use of the sensitive data, wherein the check code is used to check whether sensitive data read is in the read-only area while the software is running, and determine whether to continue running the software according to a check result
• wherein the at least one processor is configured to:
• identify data with a special marker as the sensitive data;
• and
• determine that a point of a memory read instruction associated with the sensitive data is the point of use of the sensitive data, wherein the memory read instruction is used to read the sensitive data by a pointer.

A non-transitory computer-readable storage medium, wherein the readable storage medium stores computer executable instructions, and when the computer executable instructions are configured to enable a processor to:

• identify sensitive data created by the compiler during the compilation process and determine a point of use of the sensitive data, wherein the sensitive data is operands of sensitive operations recognized by the compiler, the sensitive operations comprise program counter update, a sensitive application programming interface (API) call, a security check and a business-critical operation, wherein the business-critical operation comprises transferring and password decryption;
• set the sensitive data in a read-only section of a compilation product of a software source code, so that the sensitive data is stored in a read-only area when a software is running;
• and
• insert a check code at the point of use of the sensitive data, wherein the check code is used to check whether sensitive data read is in the read-only area while the software is running, and determine whether to continue running the software according to a check result
• wherein the at least one processor is configured to:
• identify data with a special marker as the sensitive data;
• and
• determine that a point of a memory read instruction associated with the sensitive data is the point of use of the sensitive data, wherein the memory read instruction is used to read the sensitive data by a pointer.