首页 | 官方网站   微博 | 高级检索  
     

PE文件动态加壳技术的研究与实现
引用本文:庞立会. PE文件动态加壳技术的研究与实现[J]. 计算机工程, 2008, 34(19): 160-162
作者姓名:庞立会
作者单位:国防科技大学计算机学院,长沙,410073
摘    要:对可执行文件加壳是保护软件的一种有效方法。但常用的加壳软件采用的是一种静态加壳技术,所有被加壳后的可执行文件都具有部分相同的代码,这样就增加了软件被破解的可能性,不能完全满足PE文件保护的需求。针对这一不足,在分析PE文件格式和加载机制的基础上,提出PE文件动态加壳的思想,设计和实现了一种PE文件动态加壳软件。试验结果表明其可以有效地提高PE文件的自我保护能力。

关 键 词:PE文件  加壳  多态引擎  变形
修稿时间: 

Research and Implementation of Dynamically Packing Technology for PE Files
PANG Li-hui. Research and Implementation of Dynamically Packing Technology for PE Files[J]. Computer Engineering, 2008, 34(19): 160-162
Authors:PANG Li-hui
Affiliation:(School of Computer, National University of Defense Technology, Changsha 410073)
Abstract:It is an effective method to protect software by packing Portable Executable(PE) files. But the technology which is commonly used by most packing software is a statically packing technology, and it exists a shortage that all the PE files packed by the same packing software have partly uniform code, thus increases the possibility of the packed software being decrypted, which can not fully satisfy the requirement to protect PE files. Based on the analysis of the PE file format and loading mechanism, this paper proposes the idea of dynamically packing for PE files, designs and implements a prototype of dynamically packing for PE files. The experimental results show dynamically packing technology can be used to improve the protection capability of PE files.
Keywords:PE files  packing  polymorphic engine  metamorphism
本文献已被 CNKI 维普 万方数据 等数据库收录!
点击此处可从《计算机工程》浏览原始摘要信息
点击此处可从《计算机工程》下载免费的PDF全文
设为首页 | 免责声明 | 关于勤云 | 加入收藏

Copyright©北京勤云科技发展有限公司    京ICP备09084417号-23

京公网安备 11010802026262号