| 基于Windows NT平台文件隐藏和检测系统的设计 |
| |
| 引用本文： | 王全民,王淞,金华锋,张丽艳.基于Windows NT平台文件隐藏和检测系统的设计[J].计算机安全,2010(6):27-29. |
| |
| 作者姓名： | 王全民 王淞 金华锋 张丽艳 |
| |
| 作者单位： | 1. 天津大学,计算机学院,天津,300072;北京工业大学,计算机学院,北京,100124
2. 北京工业大学,计算机学院,北京,100124 |
| |
| 摘 要： | 在深入研究Windows环境下文件访问系统内部操作机制的基础上,总结了现有常用的文件隐藏和检测技术,并对这些技术进行了查找分析,提出了一种在驱动层对文件隐藏和检测的方案。该方案不仅可以对系统中的隐藏文件进行检测并恢复被隐藏的文件,满足用户对任何可疑文件夹内隐藏文件的检测功能,还可以实现对重要的文件在内核驱动层的隐藏功能,以保证用户文件信息的安全性。
|
| 关 键 词： | 文件隐藏 文件检测 安全性 |
The Design of File Hiding and Detection System Based on the Windows NT Platform |
| |
| WANG Quan-min,WANG Song,JIN Hua-feng,ZHANG Li-yan.The Design of File Hiding and Detection System Based on the Windows NT Platform[J].Network & Computer Security,2010(6):27-29. |
| |
| Authors: | WANG Quan-min WANG Song JIN Hua-feng ZHANG Li-yan |
| |
| Affiliation: | 1.College of Computer,Tianjin University,Tianjin 300072,China;2.College of Computer,Beijing University of Technology,Beijing 100124,China) |
| |
| Abstract: | Based on the study of the operation mechanism of the file access system in the Windows environment,the paper summarizes the commonly used techniques of file hiding and detection,gives the vulnerability analysis for these techniques,and proposes the scheme of file hiding and detection in the driver level.This scheme can not only detect and recover the system hidden files,meet the function of detecting the hidden files,but also implement the file hiding in the kernel driver level ensuring the security of the file information. |
| |
| Keywords: | File hiding File detection Security |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
