Operating system address space randomized distribution system and method

Abstract

The invention discloses an operating system address space randomized distribution system and method, and relates to the field of information safety. The operating system address space randomized distribution system and method expand the address space randomized distribution range and improve the safety of randomization of the operation system accordingly. The operating system address space randomized distribution system comprises a user space layer and a kernel space layer. The user space layer comprises a user space executable program partial randomization management strategy generating / analyzing device, a global randomization management strategy module and a random event collection module. The kernel space layer comprises an executable program loading module, a virtual file system management module, a management strategy analyzing module, a randomization factor generating module and an address space randomized distribution module. The operating system address space randomized distribution method is used for the operating system address space randomized distribution system. The operating system address space randomized distribution system and method are also applied to a current domestic loongson processor platform.

Description

technical field [0001] The invention relates to the field of information security, in particular to a system and method for randomized allocation of an operating system address space. Background technique [0002] Computers are the infrastructure for information storage and processing. However, based on design complexity and implementation cost considerations, computers used to store and process information are not safe. The main factors that cause computer insecurity include: ① Lack of hardware specially designed for security requirements; ② The operating system did not consider security mechanisms from the beginning of design; ③ The inherent defects of computer languages, such as the buffer overflow security introduced by C language Hidden danger. The existence of these factors will bring different levels of security loopholes to the computer system, leaving opportunities for malicious software. For example, malware is rampant, network attacks continue, IT infrastructure...

AI Technical Summary

Problems solved by technology

However, there are many problems in the existing randomized address space allocation methods, such as: ①The current randomized allocation range is relatively limited, with a random range of more than 10 digits, it is easy for attackers to guess the address after randomized allocation by using violent guessing methods Spatial distribution

②The random number generation algorithm is only related to the clock, which is not safe enough

③It is not flexible enough. The system either chooses to enable the random allocation function of address space, that is, all processes in the system adopt the random allocation method, or disable this function. Users cannot independently choose to enable or disable the random allocation function according to the security requirements of the application; the address space Including: stack address space, heap address space, and memory mapping (mmap) address space. The current randomized allocation method cannot independently configure whether these three address spaces adopt randomized allocation according to specific security requirements.

④ At present, the Linux operating system of the domestic Loongson processor platform still lacks the support of a fully functional address space random allocation function

Images