论文部分内容阅读
针对采用嵌入技术实现病毒隐身的关键技术,提出了一种基于Hook系统服务调度表的防护措施,实现了对进程的实时监控与防御.该措施可在不需人工判断和干预的情况下,动态识别进程的合法性,并根据事先规定的响应策略做出及时响应,阻止可疑进程的运行,避免对系统造成重大危害.测试结果表明,这种拦截技术对动态嵌入式病毒的拦截是有效的.“,”Realizes the viral stealth key technologies in view of the use dynamic embedde technology, Proposed one kind based on the Hook system service dispatch table protective measure and has realized to the advancement real-time monitoring and the defense. This measure does not need the artificial judgment and intervention, the dynamic recognition process's validity, and makes the prompt response according to the preset response strategy, the impediment suspicious process's movement, avoids causing the significant harm to the system. The test result indicated that this kind of interception technology to the dynamic embedded virus's interception is effective.