移动智能终端中操作系统安全监控研究及实现
Design and Implementation of Operating System Security Monitoring of Mobile Intelligence Terminal
-
摘要: 提出了一种基于mini-PCI卡和语义不变式的移动智能终端操作系统内核安全监控方法:在仅仅初始安装了操作系统的机器上,通过学习获取操作系统运行过程中必须保持的语义不变式集合,将语义不变式集合作为内核运行的安全规范.然后,在FPGA快速开发原型实验板上,利用mini-PCI卡监控针对操作系统内核的每一次写操作.一旦发现有内核写操作,则将本次写操作(通过变换之后)与语义不变式集合作对比.如果与语义不变式集合中的某一个条目相符,则可以确认本次写操作是可信的,系统不做任何处理;如果不能与语义不变式集合中的任意一条项目相符,则可以判定本次写操作是不可信的,系统报警.实验证明了有效性.Abstract: A mini-PCI card and semantic invariants-based method for monitoring operating system security of mobile intelligence terminal is introduced:Firstly,inferring the semantic invariants of the operating system in the training period,and all of the semantic invariants will be used as security specifications of operating system during runtime;secondly,in the fast FPGA prototyping experiment board,a mini-PCI card is designed to monitoring modifications to kernel,and any violation against the inferred semantic invariants will be treated as an attack.
下载:
