Research And Implementation Of Key Technology In Computer Virus Experiment System

The principles and prevention of computer virus course,as one of the major core courses in cyberspace security specialty,is very meaningful from the practical level.Among this course,various virus and anti-virus technologies must be understood and mastered in practice.The two problems existing in current experiment systems of this course can be listed as following.On one hand,the topics of the experiments are fixed and invariable.All of those topics are pre-designed and solidified in the form of test bank.As students' experimental topics are basically the same,the plagiarism occurred in experimental process and report.On the other hand,the current experiment systems do not have automatic scoring function.The score of the experiment needs to be manually reviewed and corrected on the experimental reports,codes and screenshots to get a subjective score,which requires a large number of work and a long time.In response to the above problems,this thesis designed a new computer virus experiment system and key technologies related to are researched and implemented in the process.This thesis proposed and implemented the computer virus experiments parameterized random generation without test bank and automatic judging technology,which has not been documented.In order to realize the parameterized random generation of the file system experiments,this thesis specially designed a FAT12 file system with cluster random allocation function.In order to prevent students from knowing the automatic evaluation strategy to cheat by reverse engineering and accurately measure the behavior of the tested program to ensure that students complete the specified operation according to the experimental requirements,this thesis proposed and implemented ShadowDll technology and introduced software breakpoints,hardware access breakpoints,single-step tracking,stack traceback and key code Hook technology into automatic judging process without exposing the automatic evaluation strategy.In order to solve the resource occupation and waste caused by the two sets of processes of debugger and debugged programs during the automatic judging process,this thesis proposed and implemented the self-debugging technology based on the Windows platform and realizes the in-process debugging.In order to solve the sandbox escape security problem in online judging systems,this thesis innovatively proposed a sandbox escape prevention technology based on export table deformation,which is also applicable to the defense of general shellcode under the user layer of Windows platform.Based on the above-mentioned key technologies,this thesis implemented the parameterized random generation without test bank and automatic judging for the key experiments in computer virus experiments,expanded the functions and enhanced the security of the original online judging system,and finally realized a computer virus experiments parameterized random generation and automatic judging system without test bank.The function of this system are demonstrated through test and which can provide a more convenient experimental platform for the computer virus principle and prevention course.