| 用重构PE文件结构法防病毒 |
| |
| 引用本文： | 赵树升. 用重构PE文件结构法防病毒[J]. 计算机应用与软件, 2006, 23(9): 48-50 |
| |
| 作者姓名： | 赵树升 |
| |
| 作者单位： | 郑州升达学院资讯系,河南,郑州,451191 |
| |
| 基金项目： | 河南省教育厅自然科学基金 |
| |
| 摘 要： | Windows操作系统下编译器生成的PE文件从某种程度上给病毒侵入提供了方便。采用对PE文件结构进行修改的方法，构建文件自身防止病毒插入和防止附加病毒代码。同时用变位置的CRC校验算法来判别文件是否被修改并实现对被修改文件的自我恢复。
|
| 关 键 词： | 病毒 PE CRC校验 节 自我保护 |
| 收稿时间： | 2004-12-15 |
| 修稿时间： | 2004-12-15 |
RECONSTRUCTING PE FILE FOR ANTI-VIRUS |
| |
| Zhao Shusheng. RECONSTRUCTING PE FILE FOR ANTI-VIRUS[J]. Computer Applications and Software, 2006, 23(9): 48-50 |
| |
| Authors: | Zhao Shusheng |
| |
| Affiliation: | Department of Information, Shengda School,Zhengzhou Henan 451191, China |
| |
| Abstract: | The Windows PE file build by compiler is prone to be intruded by viruses in a way. The plan that reconstructs structure of PE file can keep viruses from inserting and appending codes. Further more Depending on CRC check in unfixed position,PE file judes and recover itself if modified. |
| |
| Keywords: | PE |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
|
