A SECRET INLINE HOOK TECHNOLOGY

摘要

This paper analyzes the traditional hook and inline hook's imperfection - easily to be detected and recovered. To improve the inline hook technology, authors put forward a new technology called secret inline hook which has greater confidentiality, can avoid the malware's detection and can refuse the latter's falsifying. The technology has been successfully applied to the automatic analysis system of malware behaviour by authors. Experiment shows that this technology can improve the security of security software.