Design and Realization of Process-Monitoring Based on Windows
Min Wei · Journal of Information Engineering University · 2007
A process-monitoring method which is based on the hooking of the system services in the Windows NT kernel is presented.It can dynamically identify the validity of a process,make response according to the pre-established rules, and prevent the running of illegal processes.It can avoid the damage of illegal process,and intensify the safety of the computer.