基于Detours软件包的Win32 API拦截技术及应用

文章介绍了DetoursWin32API拦截技术及其应用。Detours能在不涉及源代码改动且不重新编译整个系统的情况下扩充现有的系统功能。它能在运行态动态的拦截x86机器上的任意Win32二进制函数。在证券业资讯分析软件开发中应用了该项技术,使得分析软件捕获行情数据实时性较强,不会发生数据丢失现象。

基于Detours的文件操作监控方案

研究了两种文件操作监控常用的API钩挂技术,通过实验指出IATHook技术的不稳定性,提出使用基于Inline Hook技术的Detours来解决explorer.exe错误。最后给出了文件操作监控方案的实现方法,并对Detours技术进行了详细阐述。经测实验证,该方案确实能有效实现文件的安全保护。

基于Detours技术的数据防拷贝研究及实现

本文首先介绍了Detours技术,并结合数据加密和访问控制理论,提出了一个对计算机系统文件进行访问控制的新方案。该方案通过对外部存储设备访问函数的截获及分析,实现对外部存储设备的访问控制。实验表明该系统安全可靠,可以有效防止计算机信息的盗窃和泄漏。

Detours拦截技术及其应用

本文主要介绍Detours的技术原理及实现的功能 ,并通过实例说明如何使用Detours拦截Win3 2API函数 ,以实现对现有操作系统和应用程序的扩展。

基于Detours包和数字水印的文件保护

研究了Detours开发包关于API的拦截原理,介绍了数字水印中的文本水印嵌入技术,并在此基础上综合地运用了这两种技术,提出一种文件保护方法,不但实现对文件使用者权限的控制,而且提供了对文件内容的完整性保护。

用Detours拦截Win 32 API函数

本文主要介绍Detours的功能、原理、使用方法,并以一个具体的实例说明如何使用detours拦截Win32 API函数。

用Detours拦截Win 32 API函数

本文主要介绍Detours的功能、原理、使用方法,并以一个具体的实例说明如何使用Detours拦截Win32 API函数。

Distance assessment of detours by jum ping spiders

To take an indirect route(detour)in order to reach a specific target requires complex cognitive processes.Yet more demanding,from the cognitive point of view,is when the goal is only visible at the beginning of the detour.In spiders from the family Sa lticidae,vision is a key sensory modal-ity mediating navigation and prey search.Their acute vision allows them to perform complicated detours,possibly as a consequence of the multitude of potential routes in their typically complex 3-dimensional habitats.We used a 4-route choice test,in which routes differed in being either short or long and in the presence or absence of a lure of a prey item,to investigate route assessment in 2 salticid species,Trite planiceps and Marpissa marina.Although both species showed evidence of motivation to follow lured-routes,judging by the number of times they re-oriented toward them while detouring,we found that Trite chose short routes in preference to long routes,but did not prefer the lured-routes.In contrast,Marpissa exhibited random route choice,although it ori-ented toward lured-routes more often than control routes(lure absent).Our results suggest that decision-making processes about which route to take occurs before embarking on a route,but this is cognitively challenging.Spiders exhibited cognitive limitations in which the lack of visibility of the goal affected success.However,the severity of cognitive limitations depended on species.We suggest that variability in spatial ability across the Salticidae may be related to the habitat complexity inhabited by each species.

Detours源码探索

研究黑客技术，Hook API应该算是一个开发者必知必会的一门技术。而微软也给我们提供了一个Detours库，应用得很广，更重要的是其Express版是提供源码的，于是产生了分析其源码的冲动，便有了本文。本来打算写成Detours源码全析的，但本文只是介绍了其中Hook API的这一部分，同时为了避免班门弄斧之嫌，故起名为Detours源码探索。

Differences in migration phenology of warblers at two stopover sites in eastern Russia suggest a longitudinal migration pattern

Long-distance migratory birds often face major geographical barriers on their journey.While some species are able to cross them,others use longer routes to avoid such barriers.Little is known about the strategies of Siberian landbird migrants,which either cross or circumvent the deserts and mountain ranges of Central Asia en route to their non-breeding sites in Southeast Asia.Here we compare data on migration phenology and morphology from two bird ringing stations in eastern Russia,situated at similar latitudes but with a longitudinal difference of 1500 km,to hypothesise migration patterns.We found significant differences in timing between the two sites(birds migrated significantly earlier in spring and significantly later in autumn in the east),suggesting longitudinal migration as a result of migration detour.However,morphological differences show a less clear pattern.We argue that most Siberian landbirds might opt for a detour through the Russian Far East instead of a direct route in order to avoid unfavourable stop-over habitat in Central Asia.However,tracking studies will be necessary to prove this.

Windows下两种API钩挂技术的研究与实现

详细阐述了两种API钩挂技术IAT(importaddresstable)Hook和InlineHook的基本原理,给出了各自的实现方法。通过实验,指出IAT Hook在文件操作监控时存在的不稳定现象,比如explorer.exe错误。提出用基于Inline Hook的Detours技术弥补IAT Hook的缺陷,并给出了实现方法。实验结果表明,该方法能有效实现稳定可靠的API钩挂I,nline Hook是一种比较好的API钩挂技术。

代码注入攻击及防御技术研究

分析了Windows系统下代码注入攻击技术,提出了基于Detours技术挂钩装载动态链接库函数的防御方案,并介绍了具体实现方法.

Structural and functional reorganization of propriospinal connections promotes functional recovery after spinal cord injury

Axonal regeneration and ifber regrowth is limited in the adult central nervous system, but re-search over the last decades has revealed a high intrinsic capacity of brain and spinal cord circuits to adapt and reorganize after smaller injuries or denervation. Short-distance ifber growth and synaptic rewiring was found in cortex, brain stem and spinal cord and could be associated with restoration of sensorimotor functions that were impaired by the injury. Such processes of struc-tural plasticity were initially observed in the corticospinal system following spinal cord injury or stroke, but recent studies showed an equally high potential for structural and functional reorganization in reticulospinal, rubrospinal or propriospinal projections. Here we review the lesion-induced plastic changes in the propriospinal pathways, and we argue that they represent a key mechanism triggering sensorimotor recovery upon incomplete spinal cord injury. The for-mation or strengthening of spinal detour pathways bypassing supraspinal commands around the lesion site to the denervated spinal cord were identiifed as prominent neural substrate inducing substantial motor recovery in different species from mice to primates. Indications for the exis-tence of propriospinal bypasses were also found in humans after cortical stroke. It is mandatory for current research to dissect the biological mechanisms underlying spinal circuit remodeling and to investigate how these processes can be stimulated in an optimal way by therapeutic inter-ventions （e.g., ifber-growth enhancing interventions, rehabilitation）. This knowledge will clear the way for the development of novel strategies targeting the remarkable plastic potential of pro-priospinal circuits to maximize functional recovery after spinal cord injury.

基于函数截获的游戏内置广告集成技术

伴随互联网的普及,互联网广告得到快速发展,游戏内置广告已成为一种新兴的互联网广告形式。由于玩家数量庞大,网络游戏的媒体价值不断增长,与其相关的广告集成技术也获得一定发展。现有游戏内置广告技术采用SDK的集成方式,需要大量修改网络游戏源代码,广告逻辑与游戏逻辑耦合度高,难以实现复杂的交互式广告。提出一种基于函数截获的游戏内置广告集成技术,克服现有SDK广告集成技术的不足。该技术截获并替换三维图形绘制函数,动态执行脚本[11]程序,在不修改游戏客户端源代码的情况下,集成图像、视频、三维物体和动态交互式点击广告。实验结果表明,应用该技术在网络游戏场景中集成广告,不影响游戏运行的流畅性,游戏画面仍保持较高的刷新帧率。

USB移动存储设备使用控制的设计实现

该文通过对USB移动存储设备使用控制的研究,以防范非授权使用USB移动存储设备或私自对文件的输入/输出进行操作。并使用VC++编程实现其原型系统,控制USB端口的数据流向,许可或禁止针对USB移动存储设备的操作,既不影响文件交换,又可防止针对USB移动存储设备的非授权操作,从而对USB移动存储设备的使用控制做出积极的探讨。

DirectX 10图形应用程序截获技术的研究

Direct X是主流图形API,在多媒体、娱乐等领域得到广泛应用。为实现图形表面的跨进程共享,从Direct X 10开始使用Direct X图形基础架构(DXGI)对图形硬件进行底层管理。DXGI带来性能提升的同时也给图形应用程序的截获工作带来困难。为完成Direct X 10程序的拦截,需要同时截获多个图形库的函数。针对此问题,完善DLL替换+Detours的图形应用程序截获框架,克服现有截获技术的缺陷,完成Direct X 10程序的截获工作,并解决因DXGI、D3D10图形库间依赖关系产生的进程死锁问题。最后,基于该截获框架,开发出一套单机驱动的多投影显示系统,Direct X 10程序不需做任何修改就能多投影显示。实验结果表明,使用所提出的截获技术后图形应用程序画面流畅,运行稳定。

基于决策树算法的P2P蠕虫检测模型构建

P2P蠕虫是现在网络蠕虫主流传播形式之一,P2P技术应用范围的扩展更是为其迅速传播和扩散提供了便利的条件。这是由于P2P技术自身特点和缺陷造成的,也是由于现有P2P蠕虫的检测预警机制的不健全所造成的。利用数据挖掘中的决策树算法,构建一种P2P蠕虫检测模型,以增加P2P蠕虫被检测出来的机率和对未知文件的预警机制,从而减少P2P蠕虫所带来信息网络安全问题,并通过实验验证了该方法的可行性。

Rehabilitation following spinal cord injury:how animal models can help our understanding of exercise-induced neuroplasticity

Spinal cord injury is a devastating condition that is followed by long and often unsuccessful recovery after trauma. The state of the art approach to manage paralysis and concomitant impairments is rehabilitation, which is the only strategy that has proven to be effective and beneficial for the patients over the last decades. How rehabilitation influences the remodeling of spinal axonal connections in patients is important to understand, in order to better target these changes and define the optimal timing and onset of training. While clinically the answers to these questions remain difficult to obtain, rodent models of rehabilitation like bicycling, treadmill training, swimming, enriched environments or wheel running that mimic clinical rehabilitation can be helpful to reveal the axonal changes underlying motor recovery. This review will focus on the different animal models of spinal cord injury rehabilitation and the underlying changes in neuronal networks that are improved by exercise and rehabilitation.

The Use of Dynamic Message Signs (DMSs) on the Freeways: An Empirical Analysis of DMSs Logs and Survey Data

This study evaluates the Dynamic Message Signs (DMSs) use to dissipate incident information on the freeways in Las Vegas, Nevada. It focuses on the DMSs message timing, extent, and content, from the operators’ and drivers’ perspectives, considering the variability in drivers’ freeway experience. Two-week incidents data with fifty-nine incidents, DMS log data, and responses from a survey questionnaire were used. The descriptive analysis of the incidents revealed that about 54% of the incidents had their information posted on the DMSs;however, information of only 18.6% of the incidents was posted on time. The posted information covered the incident type (54.2%), location (49.2%), and lane blockage (45.8%), while the expected delay or the time the incident has lasted are rarely posted. Further, the standard DMSs are the most preferred sources of traffic information on the freeway compared to the travel time only DMSs, and the graphical map boards. The logistic regression applied to the survey responses revealed that regular freeway users are less likely to take an alternative route when they run into congestion, given no other information is available. Conversely, when given accurate information through DMSs, regular freeway users are about 2.9 times more likely to detour. Furthermore, regular freeway users perceive that the DMSs show clear information about the incident location. Upon improving the DMSs usage, 73% of respondents suggested that the information be provided earlier, and 54% requested improvements on congestion duration and length information. These findings can be used by the DMSs operators in Nevada and worldwide to improve freeway operations.

Windows操作系统的信息监控方法研究

随着计算机网络技术的发展,安全问题日益受到人们的重视。计算机信息安全可分为网络安全和主机安全两大类。长期以来人们很重视网络安全而忽视主机安全,随着信息安全技术的发展,主机安全问题也越来越受到重视。主要从工程实现角度研究了几种基于Windows操作系统的本地监控信息方法。依据分层的Windows软件系统,顺次分析了基于应用层Windows窗口消息的hook方法,基于应用层Win32函数的Detour方法和基于内核层的Dilter Driver方法。