计算机科学 ›› 2012, Vol. 39 ›› Issue (12): 91-93.

• 计算机网络与信息安全 • 上一篇    下一篇

基于增量链接的PE文件信息隐藏技术研究

田祖伟,杨恒伏,罗阳旭   

  1. (湖南第一师范学院信息科学与工程系 长沙410205);(湖南大学信息科学与工程学院 长沙410082)
  • 出版日期:2018-11-16 发布日期:2018-11-16

Research of PE File Information Hiding Based on Incremental Link

  • Online:2018-11-16 Published:2018-11-16

摘要: 增量链接旨在提高编译速度和方便程序调试。通过分析采用增量链接后生成的PE文件的特点,提出了一种基于编译器增量链接特性的信息隐藏算法。该方案将隐秘信息隐藏在两个相邻函数代码之间的填充字节中,使得隐藏的信息与程序指令代码紧密结合在一起,极大地提高了隐蔽性和杭攻击性。实验结果表明:该算法隐藏容量大,隐藏信息后的PE文件的长度不会增加,程序性能不受影响,隐蔽性好。

关键词: PE文件,信息隐藏,增量链接,填充字节

Abstract: Adopting incremental link aims to boost compile speed and make debug convenient.By analyzing PE file chararcteristics after utilizing incremental link, this algorithm was designed. Concretely,it hides information into padding bytes between adjacent function codes,which integrates hidden information into program instruction codes to guarantee concealment and attack tolerance. The experiment results show that the algorithm has a large hiding capacity, and PE file size does not increase after hidden,and there is not any impact on program performance.

Key words: PE file,Information hiding,Incremental link,Padding byte

No related articles found!
Viewed
Full text


Abstract

Cited

  Shared   
  Discussed   
No Suggested Reading articles found!