基于windows内核的软件保护系统分析-analysis of software protection system based on windows kernel.docxVIP

AbstractWith the computer science developing so fast, software security becomes a big problem. While in the field of computer security, more and more use of technology related to the operating system kernel, such as security testing, system monitoring and file protection. Protecting software from operating system kernel provide bright prospects for us.Much research has been done to software protection, such as watermarking, obfuscation, anti-debugging, anti-tampering, but all these technology are basic research for the study of software protection, each of them is a research against particular attack. While combine these basic technologies to form a software protection system is a more effective solution. The current software protection system at the application layer using a variety of software protection system methods, such as software packers, serial number registration, software lock, CD-Key, etc.,but the safety of these method is not rational, for each of them has a corresponding method of crack. Although the software protection system using hardware has high security, it requires hardware-assisted, high development costs and the using is more complex. The software protection using OS kernel technology , not only with a high security, but also with a lower cost than the hardware protection method, is a good protection scheme.We have designed a Windows kernel-based software protection framework with a universal protection that separate protection development from software development. In this framework, the security depends on the software protection system, so the development process must focus on the software protection system’s development. With kernel file access control, process access control, process control, file filtering, debugger detection and confrontation and related hardware binding, the software protection system has a higher safety and suitability. Through file access control and process access control, the system can prevent illegal copies