首页 | 本学科首页   官方微博 | 高级检索  
     

基于信息隐藏技术的PE病毒防治
引用本文:阎晓华,王冰.基于信息隐藏技术的PE病毒防治[J].计算机应用与软件,2007,24(6):9-11,86.
作者姓名:阎晓华  王冰
作者单位:西北大学计算机科学系,陕西,西安,710069
基金项目:国家自然科学基金 , 陕西省科技攻关计划
摘    要:提出一种基于信息隐藏技术的方法来防范和对付PE病毒.该方法利用PE文件结构和PE病毒只侵袭可执行文件而不攻击数据文件的特性,将可执行文件头隐藏于数据文件之中,达到保护可执行文件的目的.实验验证了该方法的可行性.分析了该方法的长处和不足,与其它防病毒方法相比,该方法具有很好的信息隐藏量,能防范已知的可执行文件类计算机病毒,也能防范未知的和未来的该类计算机病毒.

关 键 词:计算机病毒  信息隐藏  PE文件  信息安全  信息隐藏技术  计算机病毒  防治  INFORMATION  HIDING  BASED  VIRUS  FILE  EXECUTABLE  DEFENDING  分析  实验验证  保护  文件头  特性  数据文件  可执行文件  文件结构  利用  方法
修稿时间:2005-03-21

THE ALGORITHM OF DEFENDING PE EXECUTABLE FILE AGAINST VIRUS BASED ON INFORMATION HIDING
Yan Xiaohua,Wang Bing.THE ALGORITHM OF DEFENDING PE EXECUTABLE FILE AGAINST VIRUS BASED ON INFORMATION HIDING[J].Computer Applications and Software,2007,24(6):9-11,86.
Authors:Yan Xiaohua  Wang Bing
Abstract:The PE virus is one type of the most quantity in virus family,and it has great destructiveness.This algorithm,utilizing PE file structure and PE virus characteristic of only attacking the executable file without attacking the data file,hides the PE file head in the data file to achieve the goal of protecting the executable file.This paper presents the algorithm of hiding PE file head into an image and the algorithm of picking out the file from the image.The experiment has verified the feasibility of this algorithm.Compared with the situation that other defends the virus method,this method has very good hiding amount of information,can take precautions against the executable file computer virus that has already known,ones that can be taken precautions against unknownly too and this kind of computer virus in the future.
Keywords:Computer virus Information hiding PE file Information security
本文献已被 CNKI 维普 万方数据 等数据库收录!
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司  京ICP备09084417号