Research and Implementation of Windows Service Concealing Technology

CAO Lei; CAI Wan-dong

Chinese

您当前的位置：

首页 >

文章列表页 >

Research and Implementation of Windows Service Concealing Technology

更新时间：2026-09-04

- Research and Implementation of Windows Service Concealing Technology
- Vol. 28, Issue 12, Pages: 10-13(2011)
- 作者机构：
  
  西北工业大学计算机学院,陕西,西安,710072
- 作者简介：
- 基金信息：
- DOI：
  CLC：
- Published：2011
- 稿件说明：
移动端阅览
曹磊, 蔡皖东. Windows服务隐藏技术研究与实现[J]. 微电子学与计算机, 2011, 28(12): 10-13.

CAO Lei, CAI Wan-dong. Research and Implementation of Windows Service Concealing Technology[J]. 2011, 28(12): 10-13.
曹磊, 蔡皖东. Windows服务隐藏技术研究与实现[J]. 微电子学与计算机, 2011, 28(12): 10-13. DOI：

CAO Lei, CAI Wan-dong. Research and Implementation of Windows Service Concealing Technology[J]. 2011, 28(12): 10-13. DOI：

摘要

恶意程序利用Windows服务可以实现自启动及部分隐藏功能

研究服务隐藏技术能够提高对此类恶意程序的检测能力.研究了Windows服务的启动过程及服务对象的内部数据结构

提出一种结合内存隐藏和注册表隐藏的多点联合隐藏方法

设计并实现了一个基于该方法的服务隐藏程序

在实验条件下测试了此方法的隐藏效果

分析了应对该类型服务隐藏技术的检测策略.实验证明该方法能够在不影响服务功能的前提下

有效隐藏服务

躲避各类检测工具.

Abstract

Malware may use Windows services to achieve auto-starting and partial concealing.In order to improve the detecting ability to such kind of malware

it is necessary to research the services concealing technology.The boot process of Windows services and the inner data structure of service object are researched

and then a multi-point concealing method combining memory hidden and registry hidden is proposed.Design and realize a service concealing program based on the method

test the hidden effect of the method in experimental conditions

analyze the detecting strategy dealing with this kinds of service concealing technology.The experiment proves that this method can hide service effectively with no influence on the service function

and evade kinds of detecting tools.

关键词

Keywords

references

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Aerial small object detection algorithm based on improved RT-DETR

Simulation on the DC characteristics of double heterojunction p-GaN HEMT with AlN/GaN hybrid buffer layer

Implementation and verification of a dual-chain power gating strategy for low power design

A feature-oriented context understanding and slice analysis network for tuberculosis detection

A review of large model development: technological evolution from BERT to Deepseek

Related Author

No data

Related Institution

No data

AI问答

Postal code：100079
Tel：（010）53879206 Email：tmw@bjxintong.com.cn
Technical support is provided by Beijing Founder electronics co., LTD 京ICP备09082226号-64 京公网安备11010602201714号
It is recommended to read the content of this site in Chrome&IE9+. Please switch to extreme mode in browser 360.
Cookies We use cookies to help provide and enhance our service and tailor content. By continuing, you agree to the use of cookies.

⁰