计算机病毒的变形技术及变形引擎研究  

Metamorphic technology and engine of computer virus

作　　者：吴卉[1] 董卫宇[1] 黄华星[1] 

机构地区：[1]信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与设计》2009年第2期314-317,共4页Computer Engineering and Design

摘　　要：变形病毒将成为未来计算机病毒发展的趋势,研究病毒的变形技术及变形引擎十分必要。在概括病毒变形技术的原理和发展的基础上,分析了变形引擎的基本结构和流程,给出了一种变形引擎的具体实现方法,并详细介绍了其中各模块的功能和算法,同时也对其中涉及到的指令剥离、指令相关性分析以及随机数生成等关键技术的实现进行了讨论,最后对通过该引擎变形后病毒的抗查杀能力进行了测试。Metamorphic virus will be the trend in development ofcomputer virus in the future. It is necessary to research the metamorphic technology and metamorphic engine ofvirus. The metamorphic theory and development ofcomputer virus is generalized, then thebasic structure and flow are analyzed, the detailed design of two metamorphic engines is brought forward, and the function and arithmetic of every module is introduced in those engines detailedly. It also makes a discuss on the key technology that must be resolved in the implementationofmetamorphicengine, including instruction uncovered technique, instruction dependency parsing technique and generation of random number. At last, it makes a test On virus＇ ability of opposing detection of anti-virus software after metamorphosing.

关 键 词：病毒 多态 变形 变形引擎 指令剥离 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]