An algorithm for detecting the rationality of mbr content

A technology of rationality and content, which is applied in the field of detecting the rationality of MBR content, and can solve problems such as time and economic loss, system damage, and operating system startup failure

Active Publication Date: 2020-11-13
SHENZHEN TONGTAIYI INFORMATION TECH CO LTD
View PDF7 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

[0002] During daily use, if the system is maliciously tampered with the program or code of the boot sector, it will cause the operating system to fail to start, and for non-professional users, they will mistakenly think that the system has been damaged and need to reinstall the operating system, which will cause users cause unnecessary time and economic loss

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • An algorithm for detecting the rationality of mbr content

Examples

Experimental program
Comparison scheme
Effect test

Embodiment 1

[0026] The technical solution adopted by the algorithm for detecting the rationality of MBR content is to collect boot code samples (Linux / Windows / FreeBSD) of boot partitions of different operating systems in Legacy mode, form an MBR sample code pattern library, compile and integrate it into the main block area of ​​the firmware file , in the pre-os stage, before the firmware transfers control to the OS boot code, it reads the contents of the boot partition of the boot device, uses a feature extraction algorithm to compare and detect these contents with the pattern library, and starts directly after the test is passed. Fail, fix or give diagnostic output to the console.

[0027] Such as figure 1 As shown, the algorithm for detecting the rationality of MBR content includes the following steps:

[0028] S1. Read the MBR content;

[0029] S2. Extract feature information;

[0030] S3. Using feature judgment in the MBR sample code library, if a partition of the GPT type is detec...

Embodiment 2

[0034] On the basis of Embodiment 1, step S1 reads in the MBR content: before the BIOS hands over control to the OS, that is, before the MBR is read and copied to the memory of 0000:7c00, and before jumping to the specified address, read Now the MBR contents of the disk.

[0035] S2. Extract feature information: parse the content of the 512-byte MBR and extract relevant features:

[0036] String features: Invalid partition table / Error loading operation system / Missing operation system are related to windows, while Grub is related to linux and so on.

[0037] Position feature: The position feature of Invalid partition table in mbr in mrb of windows can be found in the sample code library of mbr which version mbr this mbr belongs to. For example, the position of win7 / 8 starts from 0x163 and the position of winxp / 2000 starts from 0x12c starts.

[0038] Mode characteristics: The MBR in UEFI mode has the string ID of EFI PART, but the MBR in legacy mode does not.

[0039] Step S3...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

PUM

No PUM Login to view more

Abstract

The invention relates to a system detection method, in particular to an algorithm for detecting the MBR content rationality. The algorithm for detecting the MBR content rationality is characterized in that startup code sample snippets of startup zones of different operating systems in an Legacy mode are collected to form an MBR sample code mode base and are compiled and integrated into firmware; in a pre-os stage, the firmware surrenders the control power to be before the startup code of the OS; the startup zone content of startup equipment is read; a feature extraction algorithm is used for performing comparison detection on the startup zone content and the MBR sample code mode base; if the detection is passed, the direct startup is performed; and if the detection is not passed, restoration is performed or diagnosis information is given and output to a console. The invention provides an algorithm framework achieving the effects that in the pre-os stage, the firmware detects the content of the MBR startup sector of the startup equipment through the comparison algorithm, and then, the content is fed back to the user for restoration, or the valuable diagnosis information is provided.

Description

technical field [0001] The invention relates to a system detection method, in particular to an algorithm for detecting the rationality of MBR content. Background technique [0002] During daily use, if the system is maliciously tampered with the program or code of the boot sector, it will cause the operating system to fail to start, and for non-professional users, they will mistakenly think that the system has been damaged and the operating system needs to be reinstalled. Cause unnecessary time and economic loss. Contents of the invention [0003] The invention provides an algorithm for detecting the rationality of MBR content, aiming to provide users with an algorithm framework of valuable system diagnosis information. [0004] The invention provides an algorithm for detecting the rationality of MBR content, which is characterized in that the startup code samples of the startup partitions of different operating systems in the Legacy mode are collected, an MBR sample code...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to view more

Application Information

Patent Timeline
no application Login to view more
Patent Type & Authority Patents(China)
IPC IPC(8): G06F21/57
CPCG06F21/575G06F2221/034
Inventor 吴建成
Owner SHENZHEN TONGTAIYI INFORMATION TECH CO LTD
Who we serve
  • R&D Engineer
  • R&D Manager
  • IP Professional
Why Eureka
  • Industry Leading Data Capabilities
  • Powerful AI technology
  • Patent DNA Extraction
Social media
Try Eureka
PatSnap group products