摘要
根据PE文件代码段的结构特点,对代码段子程序进行了分析,提出了将子程序进行搬移,而将信息隐藏到原来子程序位置处的信息隐藏方案。该方案将信息隐藏在代码段代码之中,使隐藏信息和PE文件原有数据紧密结合。隐藏后信息分散在PE文件各个位置,具有很高的隐蔽性,不易被察觉。和已有的一些方案相比,该方案通过提高隐藏信息的分散性增强了信息的隐蔽性,通过对隐藏信息进行加密,增强了信息的安全性。
Based on the characteristic of subroutine in code section of PE file format, this paper proposes a new information hiding scheme, in which the subroutine is moved in code section and then the information is hidden in the location of original subroutine. This scheme hides the information in the code, and makes the hidden information closely combined with the original data of PE file. The hidden information is scattered in various locations of PE file, and thus is hard to be detected. As compared with other schemes, this scheme could enhance the dispersion and security of hidden information by encrypting and scattering the information.
出处
《通信技术》
2010年第8期184-186,共3页
Communications Technology
关键词
PE文件
信息隐藏
代码搬移
PE file format
information hiding
code moving
