System and method for defending against mobile storage medium virus in island-like Ethernet

Abstract

The invention provides a system and a method for defending against mobile storage medium virus in island-like Ethernet which comprises a client side and a server. When a user inserts a mobile storage media, the client side monitors read-write operations on the mobile storage media of each process, prevents other processes outside the monitoring processes from reading data, sends prompt messages to prompt users to upload files in the mobile storage media to the server, and prevents the files from being accessed when users refuse to upload the files. The server records information of users uploading files and determines safety of the received files. Files being successfully indentified are sent back to users. The system and the method are capable of improving the effectiveness and practicality of defending mobile storage medium virus with no cost increased.

Description

technical field [0001] The invention relates to the field of virus inspection and killing, in particular to the virus defense technology of the isolated Ethernet internal mobile storage medium. Background technique [0002] The ferry Trojan horse is a Trojan horse that uses mobile storage media such as U disks as a medium to attack and spread. When the mobile storage medium infected with the Trojan horse is connected to the intranet computer, the Trojan horse is implanted into the connected computer. The information is collected and stored in the U disk. When this U disk is taken to the external network for use, the collected information will be sent to the outside world through the Internet. Because the U disk acts as a ferry from the physically isolated intranet to the Internet in the attack, this type of Trojan is called a ferry Trojan. At present, the methods to solve the ferry Trojan horse include the following: [0003] The first method is to use the virus database ...

AI Technical Summary

Problems solved by technology

[0013] iii. Different encryption methods are used in the internal mobile storage device, making it difficult for potential Trojan horses to write directly into the internal mobile storage device;

[0014] In this method, the security depends on the encryption algorithm and implementation of the internal mobile device not being known to the hacker, otherwise the hacker can still imitate the method of reading and writing the internal mobile device on the intranet, so that the Trojan horse can read and write the internal mobile device; and rely too much on the internal mobile device. The process of using the mobile storage device is relatively complicated; there is also the risk of losing the internal mobile storage device; in addition, the internal mobile storage device requires a special secure USB flash drive, and the purchase cost is relatively high

Images