Unlock instant, AI-driven research and patent intelligence for your innovation.

USB device usage record recovery and check method

An inspection method and equipment technology, applied in the field of information security, can solve problems such as registry files cannot be fully restored, mobile media cannot be parsed, etc., to achieve the effect of improving granularity and integrity, and improving overall system performance

Inactive Publication Date: 2015-11-04
CHINA INFORMATION TECH SECURITY EVALUATION CENT +1
View PDF2 Cites 6 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

The problem that may exist in the actual operation of this technology is that the registry file cannot be completely restored due to the overwriting of the registry file, resulting in incomplete or even inability (the registry file cannot be read, or the use record of the removable media is partially overwritten) Analyzing the use records of the removable media, the present invention only restores the registry file under the condition of quick format and the registry file is not damaged

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • USB device usage record recovery and check method
  • USB device usage record recovery and check method
  • USB device usage record recovery and check method

Examples

Experimental program
Comparison scheme
Effect test

example

[0043] a) Detect the current system type, distinguish XP or WIN7;

[0044] b) Open $(SYSTEM)\setupapi.log under XP system, usually C:\WINDOWS\setupapi.log in the actual system; open $(SYSTEM)\inf\setupapi.dev.log under WIN7, usually C:\ WINDOWS\\inf\setupapi.dev.log;

[0045] c) The log file contains information about the first operation of various hardware drivers, and parses the records containing "usbstor" to obtain information such as the USB name, serial number, and initial connection time;

[0046] d) Analyze the SYSTEM file, take out the USB record, compare it with the information in the log file, if there is a match, keep the record, otherwise use machine learning to try to recover and record the record.

[0047] The specific process is as follows:

[0048]

[0049] 4) USB usage record recovery

[0050] It mainly uses the machine learning module to discover the matching SYSTEM files and restore them. Find corrupted or missing parts by analyzing the SYSTEM file. A...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

The invention relates to a USB device usage record recovery and check method for recovering a USB device usage record after a hard disk installed in an operating system is quickly formatted. After the formatted hard disk is obtained, the hard disk is inserted into a host which runs normally, and a SYSTEM file is recovered to obtain USB usage record information; then, the record information is compared with a log, the information completeness is judged, and if the record information is consistent with the log, recording is performed, or otherwise, recovery is performed; and in the recovery process, the usage record is maximally recovered with machine learning method, verification is performed after recovery, and if judgment cannot be performed by recovery for effective times, exiting is performed. With the adoption of the method, the related historical USB usage record of the operating system after the formatting can be recovered and analyzed, so that the security supervision strength can be improved.

Description

technical field [0001] The invention belongs to the technical field of information security, and mainly relates to the recovery of USB usage records, in particular to a method for recovering the USB device usage records after the operating system is formatted. Background technique [0002] The rapid development of informatization, while bringing great convenience and benefits to people, also poses severe challenges to confidentiality work. In the secrecy work, the security management of the mainframe plays an increasingly important role in information security confrontation and information security. Therefore, it has become one of the trends in the development of security protection to strengthen the supervision and inspection of host security management and improve security protection capabilities through management means. However, the use of anti-secrecy inspection methods and technologies has brought new challenges to confidential security inspections. Users will quickly...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & Authority Applications(China)
IPC IPC(8): G06F11/14
Inventor 谢丰张颖君彭勇康恺陈冬青
Owner CHINA INFORMATION TECH SECURITY EVALUATION CENT