【作者】 徐晓静；

【导师】 徐向阳；

【作者基本信息】 湖南大学 ， 通信与信息系统， 2007， 硕士

【摘要】 迅速发展的互联网为人们提供了方便快捷的信息服务,但网络的开放性也给数字信息带来了许多安全威胁。随着人们对数字信息安全保护需求的日益增长,信息隐藏技术作为一项新型的安全技术逐渐被国内外学术界关注和重视。PE文件格式是Microsoft操作系统中重要的软件格式,Win32执行体软件以PE文件格式储存在磁盘上。PE文件信息隐藏技术是信息隐藏技术的重要组成部分,基于PE文件的信息隐藏技术研究还处于起步阶段。本文在详细分析PE文件格式和执行特点的基础上,将PE文件引入信息隐藏领域进行了深入地研究,概括了PE文件信息隐藏概念,提出了PE文件信息隐藏模型,探讨了PE文件中构造、非构造两种冗余和PE文件的结构特点,总结了两种信息隐藏思想,即基于PE文件冗余空间的信息隐藏思想和基于PE文件结构的信息隐藏思想。本文提出了三种PE文件信息隐藏算法。第一种是基于PE文件跳转指令的信息隐藏算法,该算法利用跳转指令的执行特点,将隐藏信息与指令紧密结合,有较好的隐蔽性和抗攻击能力。第二种是基于资源节冗余分布的信息隐藏算法,该算法首次综合利用了资源节的四种冗余优势,提高了信息嵌入量和隐蔽性。第三种是重构PE文件资源节结构的信息隐藏算法,该算法根据软件资源调用特点,用重构资源节结构的方式隐藏信息,具有较强的鲁棒性和隐蔽性。本文对三种算法分别建立了信息隐藏系统,验证了算法的可行性和有效性。在国家、企业和个人越来越关注网络信息安全的今天,本文所做工作对解决隐秘通信、版权保护和抵御Win32 PE病毒等安全问题,具有重要意义。更多还原

【Abstract】 Nowadays the rapidly developing Internet provides the quick and convenient service for people, but it also brings many security threats. With the increase of the safety needs, the information hiding technique which acts as a new security technology has been paid attention and recognition by home and abroad academe. The PE file format is an important software format in Microsoft operating system, and all portable executable software is stored in disk by PE file format. The PE information hiding technique is an important part of the information hiding technique. The research of information hiding based on PE file is still at the beginning stage.On the basis of the analysis of the PE file format and software run, the thesis through researches information hiding based on PE File, generalizes conception of PE information hiding, proposes the information hiding model based on PE file, discusses two redundancy that constructed redundancy and not-constructed redundancy, analysis the characteristic of PE file’structure, generalizes two information hiding ideas that one is based on PE file redundancy and the other is based on PE structure.The thesis proposes three information hiding algorithms. The first is the information hiding algorithm based on jump instructions in PE file. The algorithm is based on the characteristic of the PE file jump instructions, inosculates the hiding information and instructions, and has good imperceptibility and invulnerability. The second is the information hiding algorithm based on distribution of resource section redundancy. The algorithm synthetically uses the four redundancy of the resource section for the first time, and has better imperceptibility and capability. The third is the information hiding algorithm based on restructured structure of the resource section. The algorithm uses restructured structure of the resource section to denote the hiding information, and has good imperceptibility and invulnerability. The thesis respectively designs relevant information hiding system that verifies the feasibility and validity of each algorithm.Nowadays, the information security has been paid more and more attention. The work of this thesis has important significance to solve the security problems of convert communication, copyright protection and resisting Win32 PE virus.更多还原