中断向量表

介绍了中断向量表重定位的含义、中断向量表重定位的软件实现过程。

The meaning and the software realization of the interrupt vector table relocation is introduced .

基于程序行为分析的入侵检测系统采用了LKM（linux内核模块）技术来实现，它通过修改中断向量表来截获系统调用，生成由短系统调用序列串构成的程序行为库。

Intrusion detection system based on program behavior analysis finished in LKM ( linux kernel module ) . It intercept and captures the system calls by the modification of interrupt vector tables and program behavior profile composed of short sequences of system call is formed .

通过构建较中断向量表，提供可扩展的中断优先级；

It provides extendable interrupt priority by using soft interrupt vector .

本文通过对一类涉及到对中断向量表进行操作的计算机病毒作用机理的研究，提出了一种基于免疫理论的计算机病毒检测技术。

According to the research on the computer virus which involves in manipulating interrupt description table ( IDT ), we present a technology of computer virus detection based on immune theory .

在具体实现时，设置一个中断向量表并将其地址固定化，即所有的程序地址是固定的，这样在中断发生后，解析程序能够自动找到向量表。

When specific implementing , set an interrupting vector table and make its address immobilized , which means all programs address are fixed , so after the interruption , the resolver can automatically find the vector table .

研究了中断向量表在固件代码反汇编中对结构重构和反汇编精度的影响，设计了一种重构中断向量表的启发式算法和一种基于中断向量表的函数调用图提取算法。

On the basis of the research on influence on the firm-code disassembly precision and structure reconstruction made by IVT , a heuristic algorithm for the reconstruction of IVT and an algorithm for extraction of call graph based on IVT are proposed . 4 .