WINDOWS KERNEL PROTECTION SYSTEM USING VIRTUALIZATION

摘要

A windows kernel protection system using virtualization is provided to make a security company use original security, thereby providing pre-processing for personal information protection. Original data of various kernel API(Application Program Interface) functions used in a window operating system are assigned to a virtual space so that the kernel is protected from hooking techniques of various malicious programs. A set program calls a kernel API before a change by calling a function newly configured in the virtual space rather than calling a changed kernel API. A hidden code included in the changed code is detoured. Therefore, the hidden code calls an API by a normal method.