防键盘鼠标记录器的设计与实现  

Design and Implementation of the anti-Keyboard and Mouse Recorder

作　　者：刘文卓[1] 丁杰[1] 罗继明[1] 李昕[1] 

机构地区：[1]中国矿业大学计算机科学与技术学院,江苏徐州221000

出　　处：《信息网络安全》2013年第3期75-78,共4页Netinfo Security

摘　　要：如今,越来越多的木马等恶意软件利用钩子机制具备的强大功能实施信息窃取,因此解决钩子技术应用过程中存在的安全问题就变得尤为重要。文章从Windows消息机制出发,阐述了防键盘鼠标记录器的设计原理,给出了其设计与实现方法。同时讲述了系统的钩子扫描、可疑模块检测以及实时防护功能的实现要点。文章最后通过实验验证了系统的可行性和有效性。Nowadays, an increasing number of Trojans and other malicious software use powerful hook mechanism to steal information, so to solve the security problem in the process of hook technology application becomes particularly important. This paper starts with the windows message mechanism to explain the design principle of the anti-keyboard and mouse recorder, the design and implementation of the anti-keyboard and mouse recorder is given. Meanwhile, give＇, the points to achieve the hook scanning, the detection of suspicious modules and real-time protection function. Finally, the experimental result validated the feasibility and availability of this system.

关 键 词：钩子扫描 钩子屏蔽 调试钩子 HookApi 信任名单 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]