A kind of anti-tampering method and system based on linux virtual file system

Abstract

The invention discloses a Linux virtual file system-based tamper-proof method and system. The method comprises the following steps: when tamper-proof protection is required for files, calling a pre-stored interrupt service routine which comprising a file tamper-proof code; utilizing the address information of the interrupt service routine to respectively modify the routine address information currently stored in a file operation table and the routine address information currently stored in an index node operation table so as to ensure that the routine address information in the file operation table and the routine address information in the index node operation table are consistent to the address information of the interrupt service routine; and after modifying the routine address information, utilizing the interrupt service routine to carry out corresponding tamper-proof processing on all the file operation requests received in a Linux virtual file system. The method and system disclosed in the invention are capable of preventing the access results of legal users from errors when the file system is attacked by malicious tamper behaviors, so that the safety of file access is improved.

Description

technical field [0001] The invention relates to the technical field of file protection, in particular to an anti-tampering method and system based on a Linux virtual file system. Background technique [0002] Anti-tampering technology is a key technical content in the fields of file protection, system security, intrusion detection, etc. Its function is to protect the consistency of specific files or file directories. Anti-tampering technology is widely used in various file systems. With the development of virtual file system, anti-tampering technology has also begun to be applied in Linux virtual file system. [0003] However, current file anti-tampering technologies are usually developed and applied based on the technical concept of post-event recovery. Once malicious tampering events against the Linux virtual file system occur, specific files will often be tampered within a period of time. When the legitimate user needs to access the specific file, then obviously there wi...

AI Technical Summary

Problems solved by technology

[0003] However, current file anti-tampering technologies are usually developed and applied based on the technical concept of post-event recovery. Once malicious tampering events against the Linux virtual file system occur, specific files will often be tampered within a period of time. When the legitimate user needs to access the specific file, then obviously there will be an access error. It can be seen that in the prior art, when attacked by malicious tampering behavior, the probability of the legitimate user's access result being wrong is quite high. , file security is low

Images