| 基于进程植入的虚拟机带内数据采集系统设计研究 |
 点此下载全文 |
| 引用本文：王震，苗泉强，周超，吴皓敏.基于进程植入的虚拟机带内数据采集系统设计研究[J].计算技术与自动化,2026,(2):149-153 |
| 摘要点击次数: 41 |
| 全文下载次数: 0 |
|
|
| 中文摘要:用于恶意软件检测的数据采集工具容易受到恶意软件的攻击，严重影响了采集数据的时效性和准确性。将进程植入技术应用到虚拟机带内数据采集系统中，可以在虚拟机管理程序的保护和协调下，使得植入的采集进程隐身运行，并且在不影响虚拟机操作系统情况下从容地退出。实验结果表明，设计实现的基于进程植入的带内数据采集系统能够通过隐藏自己而避免被恶意软件探测到，并且能够利用多线程程序植入设计方法，通过选择功能简单的进程作为受害者进程实现对虚拟机性能的最低影响。 |
| 中文关键词:进程植入 虚拟机 带内数据采集 系统设计 |
| |
| Design and Research of Virtual Machine Inband Data Collection System Based on Process Implantation |
|
|
| Abstract:Data acquisition tools used for malware detection are easily attacked by malware, which seriously affects the timeliness and accuracy of data collection. If the process implantation technology is applied to the VM inband data acquisition system, the implantable process can run incognito under the protection and coordination of the VM hypervisor, and exit gracefully without affecting the VM operating system. The experimental results show that the designed in-band data acquisition system based on process implantation can avoid being detected by malicious software by hiding itself, and can use multi-threaded program implantation design method to minimize the impact on virtual machine performance by selecting simple processes as victim processes. |
| keywords:process implantation virtual machine inband data collection system design |
| 查看全文 查看/发表评论 下载pdf阅读器 |
