windows kernel

Software Protection System Based on Dynamic Anti Debug with Windows Kernel Technology

基于windows内核反调试的软件保护系统

Study on Remote Control under Windows Kernel Mode

Windows内核模式下远程控制研究

The analysis of context for windows kernel mode driver

Windows内核模式驱动程序运行环境的分析

Validation of processes via Windows kernel mode driver

驱动模式的Windows进程合法性验证

Design and Implementation of the Video-Capture Card Driver Based on Windows Kernel Streaming

基于Windows内核流的视频采集卡驱动程序的设计与实现

The research emphasis include : 1 . For the research object is Windows Kernel , comprehension of the kernel is necessary to the data collection of running Kernel .

重点研究内容包括：1、研究对象为Windows内核，深入研读内核源码，提取出内核运行过程中的动态信息。

For the first time , we apply the technology of passing through firewall , passing through proxy , communication hiding , and other windows kernel technology to the detection of network topology .

首次将穿墙、穿代理和通信隐藏等技术应用于网络拓扑探测。

This security file system can encrypt / decrypt data and perform access control such as open , create , delete , write and so on to certain files and directories at windows kernel level .

本文介绍了一个基于文件系统过滤驱动的的安全文件系统，在核心态实现数据的加解密以及对目录文件的访问控制，如打开、创建、删除、写等。

WHIPS is implemented as a kernel driver , also called kernel module . using undocumented structures of the Windows kernel , where it is integrate without requiring changes in the kernel data structures and algorithms .

WHIPS是作为一个内核驱动而实现的，也称之为内核模块，它完全使用的是Windows内核的未文档化结构，不要求对内核数据结构和算法进行修改。

The kernel of this paper is the collection and transfers of signal . The author put forward the VxD technology to resolve the above problem based the deeply understanding of system and principle of 32-Bit CPU 's as well as Windows kernel structure .

本文以信号采集和传输为核心，通过对32位微处理器体系结构和工作原理以及Windows操作系统内核结构的深入理解，提出利用虚拟设备驱动程序（VxD）技术解决上述问题。

Windows kernel WDM driver is analyzed in systematically . After the core construction data , the mechanism of driver and the design method is briefly introduced , it solves ETI_SecUSB driver software / hardware coordination and the implementation method of essential routine .

系统分析了Windows内核模式下WDM驱动程序，在对其核心数据结构、驱动实现机制和开发方法简要介绍后，解决了ETISecUSB驱动程序软硬件协调与调用关系以及关键例程的实现方法。

There are two issues in the Windows kernel real-time control : real-time hardware access and real-time network communication . Through designing kernel mode driver by Device Driver Kit ( DDK ), the problem of interrupt respond and hardware access has been resolved .

在Windows核心层进行实时控制包括实时硬件访问和实时网络通讯两个方面，通过采用设备驱动程序开发包（DDK）设计核心模式驱动程序的技术途径解决了实时硬件中断响应和直接硬件访问的难题；

For controlling and holding the heavily-guarded web server , a port-reuse technology developed in the Windows kernel mode is brought forward and realized . By using an already-open port which is allowed to access , it can control the server through the firewall .

防护严格的网站服务器的控守问题，提出并实现了Windows内核模式下开发的端口复用技术，该技术利用允许访问的已开放端口，穿过防火墙对服务器实施控制。

Development of filter driver of file system inside Windows NT kernel

WINDOWSnt内核下文件系统过滤驱动程序开发

Network communication technologies of Windows NT kernel layer

WINDOWSnt核心层网络通信技术研究

Draw a dedicated circuit board , and complete the Windows CE kernel cutting and system migration according to the hardware system .

绘制出了专用的电路板，并针对硬件完成了WINDOWSCE的内核裁剪与系统移植。

A process-monitoring method which is based on the hooking of the system services in the Windows NT kernel is presented .

介绍了一种以WINDOWSnt内核系统服务调用劫持为基础的进程监控方案的设计与实现。

Introduce the principle of virtual disk driver under Windows NT kernel mode . Analyze and research how to design and develop the network virtual disk driver .

通过介绍在WINDOWSnt内核模式下设计虚拟磁盘驱动的详细原理，分析和研究网络虚拟磁盘驱动的设计与实现。

In the end , the necessity , technique requirement and design methods of PnP and power management support in Windows 2000 kernel mode driver programming is stated .

阐明了Windows2000核心模式驱动程序在支持即插即用（PnP）和电源管理方面的必要性，技术要求和设计方法。

This paper introduced the constituting of data acquisition card , and the architectures of Windows NT kernel mode device drivers , and discussed the device driver programming ways in Windows NT for data acquisition card .

介绍了数据采集卡的组成原理和WINDOWSnt核心驱动程序的一般体系结构，讨论了数据采集卡WINDOWSnt驱动程序的设计方法。

This paper analyzes the network security protection realized by a packet filter firewall system based on Windows operation system Kernel .

主要研究如何通过基于Windows操作系统内核的包过滤防火墙系统来实现网络安全防护。

They are application layer realization base on Windows API and kernel driver level realization based on filter driver .

具体技术路线又分为基于WindowsAPI的应用层实现与基于过滤驱动的内核级实现。

In this paper the method of classifying and programming the Windows 2000 's kernel mode driver , especially the WDM driver , is introduced .

文章介绍了Windows2000下的内核模式的驱动程序，尤其是WDM驱动程序的分类和编制方法。

The paper analyzes the basic principle and structure of a packet filter firewall . After discussing the operation system Kernel , a packet filter firewall system based on Windows operation system Kernel is designed and implemented .

首先介绍了包过滤防火墙的基本结构和原理，然后在剖析操作系统内核的基础上，研究并设计了基于Windows操作系统内核的包过滤防火墙系统。

The other one emphasis content of the dissertation is the WDM driver under Windows 2000 Operation System kernel mode .

本文另一个重点研究的内容是Windows2000操作系统内核模式下的WDM驱动程序。

Comparing the advantages and disadvantages of network programming in Windows user mode and kernel mode , the paper uses intermedia driver to design the system .

通过分析比较Windows下用户模式和内核模式网络编程的优缺点，确定了采用中间层驱动程序进行系统设计。

There are the detailed descriptions of the Windows Embedded CE 6.0 kernel development processes and customized more than 32M operating system kernel technology .

主要为WindowsEmbeddedCE6.0内核开发流程及定制32M以上操作系统内核技术详细描述。

Windows 98 's internal kernel structure and the privilege level of application programs is described . A brief introduction of several tools for developing the virtual device driver in Windows 98 is also provided , and an example of handling the interrupt in Windows 98 is given .

介绍了Windows98的内核结构和应用程序的权限级别，简述了Windows98下虚拟设备驱动程序的开发工具，并给出了Windows98下一个中断程序实例。

The architectures of Windows NT , Windows NT kernel mode device drivers and the general ways for NT device driver designing are concerned .

介绍了WINDOWSnt，Windows核心驱动程序的一般体系结构及WINDOWSnt驱动程序的设计方法。

The requirement of predictable interrupt latency can be met by extending Windows NT using device drivers which running in Windows kernel .

采用运行于内核态的设备驱动程序对系统进行实时扩展，可以满足系统中断的可预测性要求。