Operation system safety protection method

Abstract

The invention discloses an operation system safety protection method, namely a trusted authentication method. The operation system safety protection method is mainly used for preventing a system from being destroyed by malware. According to the basic principle of the method, trust states of all subjects and objects in an operation system are determined, operation authority of the subjects to the objects is controlled according to the trust states of the subjects and the objects, the authority of the malware is limited according to the trust states, the destruction capacity of the malware is reduced to the lowest, and meanwhile usability, stability and the like of the operation system cannot be greatly influenced. The operation system safety protection method can be applied to various system versions like linux, unix, an embedded system, android and FreeBSD. Compared with mandatory access control of linux, the trust measurement technology and the like, the operation system safety protection method is convenient and easy to use and can effectively prevent the system from being modified and damaged by the malware, and performance of the system is almost not influenced.

Description

technical field [0001] The invention relates to the field of computer system security, in particular to preventing the system from being damaged and modified by malicious programs, preventing rootkits and the like. Background technique [0002] The operating system is the manager of computer hardware and software resources and data, responsible for the management of huge computer system resources, frequent input and output control, and uninterrupted communication between users and the operating system. System security has become a problem that cannot be ignored, and operating system security cannot be ignored. At present, there are more and more attack methods against the operating system, and the methods are complex and diverse. They use the operating system's own vulnerabilities to carry out malicious damage, resulting in tampering of resource configuration, implantation and execution of malicious programs, and illegal takeover of super privileges by using buffer overflow...

AI Technical Summary

Problems solved by technology

The second is to maliciously destroy the operating system, making it unable to perform normal functions

However, LSM's access control policy management is extremely complicated, and ordinary users except professional technicians cannot do it at all.

Credibility measurement technology detects whether the program has been illegally tampered with through the hash algorithm before the program is executed. Frequent hash operations seriously affect the performance of the system.