A secure computing architecture method and device based on multi-container separation processing

Abstract

The invention relates to the field of secure computer architecture, in particular to a method and device for a secure computing architecture based on multi-container separation processing. The computing architecture method proposed by the present invention includes four different processing containers, adopting container security isolation, container collaborative defense, external physical lock and internal logical lock security control, dynamic memory security cleaning, software behavior independent supervision, sensitive file Various security mechanisms such as security processing and protection, electronic payment password protection, separate installation of operating system software and application software, security upgrade of system software, etc., implement strict security processing control and operation procedures on the proposed secure computing architecture, and finally achieve for secure computing purposes.

Description

technical field [0001] The invention relates to the field of secure computer architecture, in particular to a method and device for a secure computing architecture based on multi-container separation processing. Background technique [0002] Whether the computing architecture of the existing computer system adopts single-core or multi-core, it is all based on the design idea of ​​a single physical container. The software system and file system are located in the same physical storage space, and the operating system and various application software are in the same storage space. The attack code can use various application software as intrusion vectors. Viruses, Trojan horses and other malicious software can break into the computer system through external interfaces such as network cards, optical drives, and USBs. pose a serious security threat. The traditional single-container computing architecture only considers the efficiency and reliability of computing functions, and it...

AI Technical Summary

Problems solved by technology

[0002] Whether the computing architecture of the existing computer system adopts single-core or multi-core, it is all based on the design idea of ​​a single physical container. The software system and file system are located in the same physical storage space, and the operating system and various application software are in the same storage space. The attack code can use various application software as intrusion vectors. Viruses, Trojan horses and other malicious software can break into the computer system through external interfaces such as network cards, optical drives, and USBs. pose a serious security threat

The traditional single-container computing architecture only considers the efficiency and reliability of computing functions, and its security completely depends on the terminal security protection system or cloud security protection implemented by software. Due to its inherent architectural defects, there is no defense flexibility and no Without defense in depth, the single-container computing architecture is difficult to defend against various unknown security threats. Any security vulnerability exploited may break the entire defense system. This is a inherent security risk of the single-container processing architecture. Today is almost defenseless

[0003] The essence of a network attack is to tamper with the system software of the target computer or insert malicious codes in the application software, or to steal the target's sensitive data, or to sneak into the target's dynamic memory to obtain the opportunity to execute, or to destroy the normal operation of the target

Images