Host kernel data reduction and protection method

Abstract

The invention discloses a host kernel data reduction and protection method. The method comprises two steps as follows: a kernel data reduction method system is established, and a kernel data active protection prototype system is designed; before the kernel data are reduced, the kernel data need to be obtained firstly and are subjected to corresponding processing including analysis and reorganization and sorting, and based on a kernel data protection principle, the kernel data active protection prototype system HV-KDAP adopting hardware virtualization is designed, HV-KDAP aims to protect the kernel data, codes and relevant registers, prevent from being tampered with by malicious codes and be compatible with normal operation of other functions of an operation system. An active memory management method based on memory pre-allocation is adopted, a group of user interface API (application programming interface) function libraries are provided and allowed to be called by users in a source program, the requirement for software fault tolerance of a high-reliability system is met, and the integrity protection of a kernel is directly realized with a hardware virtualization technology, so that the application range of the technology is expanded.

Description

technical field [0001] The invention relates to the technical field of kernel data protection, in particular to a method for restoring and protecting host kernel data. Background technique [0002] Global network interconnection has brought convenience to people's life and work, and people are enjoying the better life brought by network technology. But at the same time, some criminals use the loopholes of the network to illegally invade other people's host systems, and some use the network to steal other people's personal information, such as online bank account passwords, etc., posing a major threat to the safety of other people's property. At present, our country is undergoing large-scale modern economic construction, and needs to use its own information security system to protect its own network and information system, especially for national large-scale computer networks, network security and information security must be given top priority status. Faced with this situa...

AI Technical Summary

Problems solved by technology

Most of these methods use virtual machines to implement attack detection, but how to improve the efficiency of virtualization, reduce the difficulty of its development, realize lightweight trusted computing, and take into account system security and code availability have yet to be resolved.

Images