用动态链接库外包技术截获Win2000的安全系统处理

Getting the Actions of Safety Mechanism in Win2000 by Means of Wrapping Dynamic Link Library

采用 DLL外包 ,截获了 Win2 0 0 0中系统核心之一 Winlogon.exe的处理 ,探讨了 Win2 0 0 0的安全体系的实施过程 ,分析了 Win2 0 0 0的一个核心进程和核心链接库以及对 Win2 0 0 0中重要的动态链接库

This paper presents how to get the actions of Winlogon.exe,a core process in Windows 2000 system,and explores the implementation process of the safety mechanism in Win2000.In addition,a core process and a core link library of Win2000,as well as a dynamic link library in Win2000,GINA by means of wrapping DLL,are analyzed.