摘要： 结合Linux/Unix 病毒实例,分析了Linux/Unix 系统ELF文件格式病毒的原理,并从5个方面讲述了实现的关键技术:病毒体寄生ELF文件技术,寄主程序入口重定位,病毒体地址无关代码,LKM可重载内核技术以及网络功能的实现。最后,提出了对这一类病毒检测与防范的方法及策略。
关键词:
Linux/Unix系统,
可执行链接文件格式病毒,
病毒寄生,
可重载内核LKM
Abstract: The technological details about infection mechanism of ELF virus is analysed, with specific case of ELF virus. Five critical questions are illustrated which include: parasite in host file, redirect executive entry of host to realize virus self-execution , PIC (Position Independent Code) , LKM ( Lodable Kernel Modules) and Interenet propagation of virus. Finally, the paper suggests several practical strategies for detection and protection of virus.
中图分类号:
谢瑶,潘剑峰,朱明. Linux/Unix环境中ELF格式病毒的分析[J]. , 2005, 31(04): 168-170.
XIE Yao1, PAN Jianfeng2, ZHU Ming2. Analysis of ELF Virus in Linux/Unix Systems[J]. , 2005, 31(04): 168-170.