网络游戏外挂技术及检测  

Hack technology and detection of online games

作　　者：罗平[1] 徐倩华[1] 

机构地区：[1]清华大学计算机系网络所,北京100084

出　　处：《计算机工程与设计》2007年第6期1273-1276,共4页Computer Engineering and Design

摘　　要：网络游戏逐渐商业化,恶性外挂使游戏失去了公平性,带来了很多危害。目前游戏外挂的水平和技术含量都有很大的提高,除了最初的键盘鼠标模拟和变速齿轮技术外,拦截Sock技术、拦截API技术、Hook技术、直接修改程序内存等高端技术也被广泛应用。外挂逃避检测的手段很丰富,还没有值得推广的外挂检测技术,面对现状,深入分析外挂原理,针对性地提出检测外挂的综合对策,达到更好的检测效果,并最终查杀封禁恶性外挂,是网络游戏健康发展的必然要求。Online games are becoming more and more commercial, meanwhile, more rogue game hacks are emerging on various game sites, hacks bring a lot of endangerment to the society. Besides early technique, like mouse-keyboard simulating and speed gear, some new high-techniques are applied in game hacks, for instance, intercepting winsock, intercepting API, hook, modifying the memory. Until now nobody has come up with a viable generalized solution to this problem. There are many versatile methods of evading hack detection, it is necessary to carry on a thorough analysis about these mechanisms and raise a few comprehensive and effective countermeasures of detecting hacks.

关 键 词：外挂 变速齿轮 HOOK DLL 系统进程 探测 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]