: . , . , .
. , , , . . , : ( ), ( ) ( ). : , , , , .
1. .
( ) . , . , .
2. .
. , , . .. , , , . , .
3. : (Sandbox).
, . , , . : , , . , . , , .
|
|
4. .
, , . , , , - .
5. .
:
;
;
, , .
. . , , , .
, . :
1. .
.
2. .
. , .
3. .
. , .
( ), ( , , ). : , , . .
4. : / . .
. , , , .
, , , , . , . , , .
|
|
:
:
: , ,
:
1.
2.
3. ()
4.
5. API- ( LoadLibrary, GetProcAddress )
6. ( , ).
7. ,
:
1.
2.
:
1.
2.
:
1.
2. 0xCC
3.
1. SEH/VEH
2.
3.
:
1. BeingDebugged PEB IsDebuggerPresent
2. CheckRemoteDebuggerPresent
3.
4. (\\.\ntice, \\.\sice)
5. .
a. S-Ice:
i. mov si, 4647h / mov di, 4a4dh / int 3
ii. Int 3 UnhandledExceptionFilter
-
API-
o APISpy32
o APIMonitor
o FileMon
o RegMon
o ProcMon
:
/
o TEB / PEB
o PE
= PE + / + [ ] (UPX, ASPack, ASProtect, tElock, Armadillo, PECompact...)
o /
o
o
o PE-
o
:
, .
, .
, read the manual, 80- . , , , . , . , . , , , . . , . , .
|
|
- , - . Windows 95 - . , , . . , . .
, . Steam Valve, . Steam SecuROM, . Steam , , SecuROM. Steam , SteamDown. , , .
Ƹ
StarForce. , . CD-ROM . , , . StarForce . , . , : BIOS, . , BIOSa. PlayStation XBOX. , - , . , , .
. . , , - MP3 . Watermark technology ( ) . , , . -. mp3- p2p , . , - .
|
|
. , , . . , , . ( , ). , , . , , Blu-ray HD-DVD, . , , .
, , - . Fade CD DVD. Fade , , , . , - . , , Fade , . , , . , . , Intuit TurboTax- Macrovision SafeCast/C-Dilla. , . , Intuit .
Sony. 2005 -, Extended Copy Protection (XCP). XCP , . , , , . Sony - XCP, .
Analog Copy Protection
. , , , . ACP . ACP , . , . , DVD-, .
CD-ROM
CD-ROM
1. , CD
2.
3. ,
4. -. .
5. Windows.
( ), , .
NTFS, , , , .
EFS, , , , EFS, .*
Windows, , (, ), , , .
|
|
, , , .
) ( ), , .
Windows : , , , , , , , . , , "". Windows , . - , - .
Windows . , - . , ( POSIX) Windows . , , . , , , , , , . .