Whitelist network management and control system and method based on trusted chip

Abstract

The invention provides a white list network management and control system and method based on a trusted chip. The system comprises a management server based on the trusted chip and a client. The management server and the client establish a network connection through a trusted network, a user can configure a white list file on the client according to actual demands, the management server configures the execution mode of the white list file of the client, when an application program is executed, the client checks the application program, allows the execution of the application program when the application program passes the check, and detects whether the application program can be executed as an untrusted application program according to different execution modes when the application program does not pass the check. According to the system and method provided by the invention, the hardware aspect is implemented based on the trusted chip, the integrity and the security of the system can be ensured, on the security strategy aspect, the secure monitoring and effective management of the network are realized by using a white list strategy, and meanwhile diversified demands of the user can be satisfied at the same time.

Description

technical field [0001] The invention relates to a trusted chip-based whitelist network management and control system and method, and belongs to the technical field of information security. Background technique [0002] In the field of information security technology, black and white list strategies are often used to prevent unknown programs and files such as malware, attacks, and viruses from running on the terminal, and to prevent unknown programs from causing security risks to the system; Whitelist files, only applications that meet any of the rules in the whitelist file can be executed, and applications that do not comply with the whitelist rules are prohibited from executing. Whitelist policies can greatly improve system execution efficiency and effectively ensure system security. [0003] In the cloud computing environment, users have various business needs. How to meet the needs of users while ensuring the security of the cloud computing system is a technical problem t...

AI Technical Summary

Problems solved by technology

The existing whitelist strategy is generally applied to stand-alone terminals. The client formulates whitelist files according to its own business needs and security requirements. Although it can meet the actual needs of users, it cannot achieve effective supervision of the entire network. The server uniformly sends whitelist files to each terminal, but it cannot meet the diverse needs of users

Images