Extracting system for internal curing data of windows application program

A technology of data extraction and application program, which is applied in the system field of information processing technology, can solve the problems that static analysis cannot fully obtain data information, run-time information analysis, etc., and achieve the effect of reducing content and clear analysis work

Active Publication Date: 2009-03-25
SHANGHAI JIAO TONG UNIV
View PDF0 Cites 30 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The method proposed in this paper is based on static code analysis and does not analyze runtime information. Its shortcoming is that static analysis cannot

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0032] The embodiments of the present invention are described in detail below: this embodiment is implemented under the premise of the technical solution of the present invention, and detailed implementation methods and processes are provided, but the protection scope of the present invention is not limited to the following embodiments.

[0033] In this embodiment, the Windows application executable file refers to a class of executable binary code collection files under the Microsoft Windows platform based on the Intel x86 architecture, including 32-bit PE (Portable Executable) executable files (EXE format), dynamic link Library files (DLL format), driver files (SYS format), static link library files (LIB format) and executable controls (OCX format). In view of well-known reasons, this embodiment does not specifically describe the structure, loading and execution mechanism of executable files, nor does it specifically describe the disclosed technologies such as reverse engineer...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention provides a system for extracting data solidified in a Window application program, which belongs to the technical field of software analysis and information safety, wherein an executable file type information identification module identifies the format, development language type and protection type of an executable file; an executable file counter-protection module is responsible for the counter-protection of the executable file needing the covering protection of a protection code; an executable file code analysis module disassembles and decompiles the executable file to obtain compilation and high level language codes and give the structural and logical information; a cryptography analysis module is responsible for the identification of the cryptography algorithm adopted in the executable file when the solidified data information stored by encryption appears in the executable file; and an executable file debugging and information extraction module checks the internal state of the running program in the running process so as to extract the information. The system can effectively extract and analyze the data information solidified in the program and give a generation method and original information of the data information.

Description

technical field [0001] The invention relates to a system in the technical field of information processing, in particular to a system for extracting solidified data inside a Windows application program. Background technique [0002] A software product usually refers to the abstraction of a static code instruction set that can be executed after compilation. In actual operation, the software is loaded into the memory and becomes a program body or process body, which includes not only static code instructions, but also dynamic data. information. When the program is running, there are many types of data information, which may be the information that the program accepts external input, may be the fixed information inside the program, or may be the information that the program transforms the input into output in a certain way. Usually, software analysis can only observe the data information of the program from an external perspective, and cannot determine the type of information, ...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
IPC IPC(8): G06F9/44
Inventor 谷大武李卷孺陆海宁陈帆张磊
Owner SHANGHAI JIAO TONG UNIV
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products