Method and system for verifying software completeness

Abstract

The invention discloses a method for verifying software completeness. The method comprises the following steps: acquiring path of a loaded executable file through capturing system call of an upper operation system in a virtual machine monitor; acquiring a Hash value of the executable file according to the path of the executable file; comparing the Hash value of the executable file with software fingerprints in a fingerprint bank; and carrying out completeness verification on the executable file according to the result of fingerprint comparison. The invention also discloses a software completeness verification system. The method and the system for software completeness verification realize software completeness verification in the virtual monitor, is independent of the operation system without depending on completeness of the operation system, improves security of the system, and has universality and compatibility. The technical proposal belongs to completeness verification of software in loading period, reduces verification cost without support of auxiliary hardware, reduces cost and improves performance compared with the method for verifying completeness of a file system.

Description

technical field [0001] The invention relates to a software integrity verification method and system, in particular to a software integrity verification method and system at a virtual machine monitor layer, belonging to the technical field of computer security. Background technique [0002] With the rapid development of Internet technology, network security has become a major aspect of the Internet that cannot be ignored. The continuous proliferation of malicious software such as viruses, Trojan horses, spyware, and rootkits has seriously threatened Internet security and has become the number one threat in the field of network security. From a technical point of view, malware has the following characteristics: [0003] (a) Concealment: It runs in the software system in a way that is not noticed by the user; after running, it usually hides its own existence, so as to escape the detection of security tools such as anti-virus software. For example, malware often hides its own p...

AI Technical Summary

Problems solved by technology

[0014] The present invention provides a software integrity verification method and system. In order to solve the problem that the software integrity verification methods in the prior art are located inside the operating system and depend on the integrity of the operating system, and that the integrity verification methods in the prior art lack universal sex and compatibility issues

Images