内网监控系统自保护技术的研究与实现

Research and Implementation of the Self-Protection Technology of Internal Network Monitoring System

研究内网安全监控系统的自我保护技术,对常见的隐藏进程的方法进行比较分析,设计一个采用拦截系统服务分配表隐藏进程方法的自保护模块,实现系统的自保功能,并给出具体实现代码。

Researches on the self-protection technology of internal network security monitoring system, analyses and compares the current methods of hiding process, designs a self-protection module using Hook SSDT method, realizes self-protection function of the network security monitoring system, and finally gives a concrete realization of the code.