带DKOM技术的软件加壳方案  

THE SCHEME OF MAKING SHELL FOR SOFTWARE BASED ON DKOM TECHNOLOGY

作　　者：骆剑锋[1,2] 陈伟东[3,2] 

机构地区：[1]华南理工大学,广东广州510641 [2]东莞职业技术学院,广东东莞523808 [3]中山大学,广东广州510006

出　　处：《计算机应用与软件》2010年第11期169-171,共3页Computer Applications and Software

摘　　要：介绍一个在一般软件加壳方案上补充了随机及防跟踪的方法,并且针对现加壳技术的不足(忽略了解壳后的保护)而提出采用DKOM技术,它可以对正在执行的软件进程的信息进行隐藏,以防破解者趁软件在内存中运行时,把对应的内存进行转存成软件文件。In the article the authors perfect the general shell-packing scheme by patching it with randomisation and anti-tracking measurements. An upgraded technology named DKOM is proposed to remedy the neglect of protection after unpacking,which is the defect of the current packing technology.The novel technology is able to conceal information of the running processes to guard against crackers who try to save memory data to disk files while the processes are running.

关 键 词：DKOM技术 EPROCESS数据结构 Hash值 MD5算法 内核API函数 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]