Presentation is loading. Please wait.

Presentation is loading. Please wait.

So Cool (PL) 19 th Kang, Sung won 19 th Park, Jong min 19 th Park Gui mong.

Similar presentations


Presentation on theme: "So Cool (PL) 19 th Kang, Sung won 19 th Park, Jong min 19 th Park Gui mong."— Presentation transcript:

1 So Cool (PL) 19 th Kang, Sung won 19 th Park, Jong min 19 th Park Gui mong

2

3 Protector of My Digital Contents Busan Samsung Software Membership

4 X ?? User

5 Protector of My Digital Contents Busan Samsung Software Membership Protector Prevent Illegal Copy & Use Unlimited File Format (Limited Period) JPG Regular Players

6 Protector of My Digital Contents Busan Samsung Software Membership License Policy Contents Provider Application + Web Server Windows Driver ActiveX License Policy License Policy Contents User Windows Driver WebServer Address Connect(Using WebBrower) Using ActiveX ( Automatically install Driver & License ) Contents Transmit

7 Protector of My Digital Contents Busan Samsung Software Membership Provider Application Add File Save String[] License Setup to File CAB File Auto Make Add to Web Server & Running

8 Protector of My Digital Contents Busan Samsung Software Membership Provider User Add File Provider Application WebServer DownFile List INCLUDE Setup RUN WebServer DownFile List READ Downlaoder File Down

9 Protector of My Digital Contents Busan Samsung Software Membership Application I/O Manager File System Filter File System Stack User Level Kernel Level Filter Manager Filter Manager System Mini Filter Driver System Mini Filter Driver Network Mini Filter Driver Network Mini Filter Driver

10 Protector of My Digital Contents Busan Samsung Software Membership System Service Dispatch Table XX Keeper (Self Defender) SystemServiceDispatherSystemServiceDispather System Service XX System Service XX

11 Protector of My Digital Contents Busan Samsung Software Membership Keeper Driver (Self Defender) SystemInformationClass SystemInformation …. ReturnLength SystemInformationLength NewZwQuerySystemInformation Process information D D C C B B A A

12 Protector of My Digital Contents Busan Samsung Software Membership Keeper Driver (Self Defender) hFile hEvent …. IoApcContext FileInfoClass NewZwQueryDirectoryFileNewZwQueryDirectoryFile Hide File & Folder inform D D C C B B A A

13 Protector of My Digital Contents Busan Samsung Software Membership

14 .inf File Make.CAB File Make

15 Protector of My Digital Contents Busan Samsung Software Membership

16 Anti-Reversing Techniques Anti-Analysis BreakPoint Detection Garbage Code Anti-Disassembly

17 Protector of My Digital Contents Busan Samsung Software Membership Anti-Disassembly Example Code

18 Protector of My Digital Contents Busan Samsung Software Membership Anti-Disassembly Apply

19 Protector of My Digital Contents Busan Samsung Software Membership Anti-Disassembly Result

20 Protector of My Digital Contents Busan Samsung Software Membership BreakPoint Detection Apply

21 Protector of My Digital Contents Busan Samsung Software Membership BreakPoint Detection Result Will jump to the wrong memory address.

22 Protector of My Digital Contents Busan Samsung Software Membership Garbage Code Apply

23 Protector of My Digital Contents Busan Samsung Software Membership Garbage Code Result Complex code

24 Protector of My Digital Contents Busan Samsung Software Membership Anti-Capture Empty clipboard Native Api Hooking Dll Injection Ctrl + C, PrintScreen Key to prevent use BitBlt() Hooking NtGdiBitBlt() Hooking User Anti-Capture

25 Protector of My Digital Contents Busan Samsung Software Membership Anti-Capture Native Api Hooking NtGdiBitBlt Funtion Hooking Win32k.sys SystemServiceDescriptorShadowTable Hooking

26 Protector of My Digital Contents Busan Samsung Software Membership Device Driver Loader Service Control Manager (SCM) InstallHinfSection Program Install Registry Protection RUNDLL32.EXE SETUPAPI.DLL,InstallHinfSection DefaultInstall 132 Driver.inf

27 Protector of My Digital Contents Busan Samsung Software Membership Development Environment OS : Windows Window XP SP3 IDE : Microsoft Visual Studio 2008 / 6.0 Windows Device Kit 7600.16385.0 Debug Tool : OllyDBG, WinDbg, DbgView Virtual Machine : VMWare Workstation 6.0 Language : C#, C, C++, Assambly

28 Protector of My Digital Contents Busan Samsung Software Membership Kang, Sung won (PL) Provider Application (Protector) - Digital Contents File Management - License Policy - WebSever & WebPage - ActiveX (Automatically install Driver & License) Anti-Reversing - Garbage Code - Anti-Disassembly - Breakpoint Detection Anti Capture Park, Jong min Park, Gui mong Keeper (Windows Driver) Mini Filter Driver - System Filter Driver - Network Filter Driver Driver Loader

29 Protector of My Digital Contents Busan Samsung Software Membership Kang, Sung won Park, Jong minPark, Gui mong

30


Download ppt "So Cool (PL) 19 th Kang, Sung won 19 th Park, Jong min 19 th Park Gui mong."

Similar presentations


Ads by Google