利用核心态注入技术的防沉迷系统的研究  

Research on Anti-addiction System Using Injection Technology in Kernel Mode

作　　者：朱若磊[1] 

机构地区：[1]广东商学院信息学院,广州510320

出　　处：《西南师范大学学报（自然科学版）》2011年第4期147-152,共6页Journal of Southwest China Normal University(Natural Science Edition)

基　　金：广东省自然科学基金项目(06023961)

摘　　要：Windows系统中,大量安全产品的存在,使得众多基于进程监控的客户端反沉迷软件面临严峻的生存环境,它们经常被当作非安全软件而遭到查杀.对此,提出了一种通过在系统核心空间对API函数的执行进行全局钩挂拦截并结合调用门的设计与使用,实现对活动进程的监控的方法.系统测试表明,采用该方法实现的反沉迷监控系统能够与安全产品和平共处,具有较强的健壮性.In Windows,because of the existence of security software,anti-addiction system depended on technology of process monitor which runs in local system faces very rigorous runtime environment and is often handled as rogue software by some security software.For this,a new method which makes use of global API hooking technology in kernel mode and call gate design is proposed to monitor active process in current system.The test in XP system illustrates anti-addiction system using this method not only can get more robust performance but co-exist with security software better.

关 键 词：进程监控 反沉迷 核心态 全局钩挂 调用门 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]