利用核心态注入技术的防沉迷系统的研究

Windows系统中,大量安全产品的存在,使得众多基于进程监控的客户端反沉迷软件面临严峻的生存环境,它们经常被当作非安全软件而遭到查杀.对此,提出了一种通过在系统核心空间对API函数的执行进行全局钩挂拦截并结合调用门的设计与使用,实现对活动进程的监控的方法.系统测试表明,采用该方法实现的反沉迷监控系统能够与安全产品和平共处,具有较强的健壮性.

Research on Anti-addiction System Using Injection Technology in Kernel Mode

In Windows,because of the existence of security software,anti-addiction system depended on technology of process monitor which runs in local system faces very rigorous runtime environment and is often handled as rogue software by some security software.For this,a new method which makes use of global API hooking technology in kernel mode and call gate design is proposed to monitor active process in current system.The test in XP system illustrates anti-addiction system using this method not only can get more ...