Method and device for enhancing security of application software

Abstract

The invention relates to the technical field of software security, and discloses a method and device for enhancing security of application software. The method comprises the following steps: establishing a virtual security domain for each protected application software in an operation system; mapping the application process, required resources and security requirement of the protected applicationsoftware into a subject, an object and intra-domain security attribute corresponding to the application software, and respectively mapping other processes in the operation system into an extra-domainsubject and an extra-domain object; trapping a resource request transmitted by the application process in the operation system; and controlling the access of the subject, mapped by the application process, to the subject which is mapped by the required resource according to the resource request permission and the intra-domain security attribute. By adopting the scheme of the invention, the security of the application software can be ensured on the basis of not influencing the operation efficiency of the software or re-deploying the application software and the service system in which the application software is positioned.

Description

technical field [0001] The invention relates to the technical field of software security, and more specifically, to a method and device for strengthening the security of application software. Background technique [0002] As commercial operating system manufacturers increase their investment in the security of the operating system and introduce development models that improve product security, such as the software security development life cycle, into the development process of the operating system, the number of security vulnerabilities in the operating system has gradually decreased. It is becoming more and more difficult to exploit loopholes, and the cost of exploiting loopholes is gradually increasing, which makes hackers and virus makers gradually shift their attention to application software with relatively poor security. Compared with operating system manufacturers, developers of application software generally have poor software security awareness and relatively littl...

AI Technical Summary

Problems solved by technology

[0006] 1. It is necessary to redeploy the existing application software, which has a great impact on the existing business system, making it difficult or even impossible to implement

[0007] 2. As hardware manufacturers increase virtualization capabilities in computer CPUs, Northbridge chips and other hardware, the efficiency of virtual machines based on hardware virtualization technology has been significantly improved. However, due to the switching between shadow page tables and physical page tables, dynamic binary translation, privileges Instruction trapping and emulation, etc. are limited by the technologies necessary to realize virtual machines, and their efficiency is still lower than that of real physical machines

Images