基于进程鉴别和隐藏的病毒主动式防御技术  

Active Defence Technology with Virus Based on Differentiation and Hiding Process

作　　者：邓璐娟[1] 刘涛[1] 甘勇[1] 熊坤[1] 

机构地区：[1]郑州轻工业学院计算机与通信工程学院,郑州450002

出　　处：《计算机工程》2007年第5期117-119,共3页Computer Engineering

基　　金：河南省优秀中青年骨干教师基金资助项目"网络控制中的关键技术研究";河南省新世纪优秀人才基金资助项目(2005HANCET-03)

摘　　要：根据行为自动监控、行为自动分析和行为自动诊断的新思路,利用进程鉴别和隐藏技术对信息安全进行研究。通过VC++6.0工具平台实现了病毒主动防御的目标,实际运行的系统证明该技术可以从根本上克服传统防病毒软件中信息保护滞后于新病毒出现的重大缺陷。The paper makes use of the differentiation and hiding technology of the process to research the information security, according to some new thoughts, such as the automation monitor and control of behavior, automation analysis of behavior, automation deduction of behavior. It achieves active defense toward the viruses by using the tool of VC＋＋6.0, the actual system proves that the technology can conquer radically the fatal objection that the new viruses come forth ahead of the information protection in the traditional preventing virus software.

关 键 词：病毒 MD5 进程隐藏 伪隐藏 钩子 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]