Operating system object reuse check method based on exhaustive search

Abstract

The invention provides an operating system internal memory space and disc space object reuse check method based on exhaustive search, which belongs to the fields of information security and computer operating systems. The internal memory space object reuse check method is characterized in that a kernel driver is used for converting a virtual address into a physical address, the same internal memory space is allocated for a check process through the internal memory physical address, and keyword matching is conducted on stored data in the space by adopting an exhaustive search method. The disc space object reuse check method is characterized in that a disc physical address for data storage is acquired through the kernel driver, the reading of the stored data in a disc space is directly conducted through the physical address and then special character matching is conducted by adopting the exhaustive search method. By using the method, object reuse check can be rapidly and effectively conducted on the internal memory space and the disc space, full-disc searching and traversing are not required to be conducted on the internal memory space and the disc space, the method is convenient and efficient to use and the check result is accurate.

Description

Technical field [0001] The invention relates to an exhaustive search-based object reuse inspection method for an operating system. In particular, it refers to an exhaustive search-based object reuse inspection method for operating system memory space and disk space. The invention belongs to the field of information security and computer operating system. Background technique [0002] GB17859-1999 divides the security protection capabilities of computer information systems into five levels. Starting from the second level of system audit protection, computer information systems are required to have the ability to protect object reuse. Specifically, it is stipulated that "in the free storage object space of the trusted computing base of the computer information system, before the object is initially assigned, assigned or reassigned to a subject, all authorizations to the information contained in the object are revoked. When the subject obtains a released When accessing the ob...

AI Technical Summary

Problems solved by technology

[0007] At present, for the inspection of object reuse in physical memory and disk space, the "Information Security Information System Security Level Protection Evaluation Criteria" provides general inspection methods and guidance steps, but there is no relevant inspection technology and tools. to report

Images