摘要
Rootkit是恶意软件用于隐藏自身及其它特定资源和活动的程序集合。本文针对windows Rootkit的启动方式,将Rootkit归为先于操作系统启动和伴随操作系统启动两类,详细分析了这两类windows Rootkit的启动方式、实现原理及隐藏技术,并对现有的检测方法的原理进行了深入的分析。
Rootkit is used to hide its malicious software and other special resources and activities of the procedures set.In this paper, stating with windows Rootldt, Rootkit is prior to the operating system boot and with the operating system to start the two class, the start of the two kinds of windows Rootldt, the realization principle and hiding technology is analyzed in detail, and the principle of the existing detection methods are analyzed.
出处
《电子世界》
2013年第9期13-15,共3页
Electronics World
