A method and device for safely loading whitelist library files

Abstract

The application provides a method and a device for safely loading files in a white list library. The method comprises the following steps of: separately storing a preset key and the ciphertext in a host security software code to ensure the security of a white list key; adopting a secondary encryption mechanism, that is to encrypt the data stored in the white list according to the white list key and a first encryption algorithm to obtain a white list data ciphertext, then calculating a hash value of the white list library by using a second encryption algorithm, encrypting the hash value of thewhite list library according to the white list key and the first encryption algorithm to obtain a hash ciphertext of the white list library, thereby ensuring the security of the data in the white listlibrary. By verifying the security of the white list library through decrypting the white list library using the preset key, the white list library is loaded when the white list library is verified to be secure, thereby guaranteeing the security of the host security software when loading the white list library.

Description

technical field [0001] The present invention relates to the technical field of industrial control security, and more specifically, to a method and device for safely loading a whitelist library file. Background technique [0002] The whitelist library is a list of files trusted by the host, and the objects in the list are allowed to be accessed or executed. During the operation of the host security software monitoring system, only programs in the white list are allowed to run, and malicious and unauthorized processes and file operations will be blocked from running. The host security software conducts a comprehensive scan on the host, generates a trusted whitelist library, and protects the whitelist from being manipulated and destroyed by malicious software. [0003] Currently, a secret algorithm and a fixed key are generally used to realize secure communication between the host security software and the registration form library. A fixed data encryption key is agreed betwe...

AI Technical Summary

Problems solved by technology

[0004] From the perspective of product management, there is a great risk of leakage of algorithms and keys in a series of processes from product development to production

And in many cases, the algorithm and key are not even confidential to the insiders of the enterprise.

On the other hand, the long-term use of a single algorithm and key is also very easy to be cracked after obtaining a large amount of communication data

[0005] In summary, the existing methods are difficult to guarantee the communication data security between the host security software and the white list library

Images