TEE-based software behavior active measurement method and system

Abstract

The invention discloses a TEE-based software behavior active measurement method and system. The method comprises the following steps executed in the operation process of a measurement object in an REEenvironment: an active measurement agent in the REE environment monitors and acquires behavior characteristics of the measurement object, and sends the behavior characteristics of the measurement object to an active measurement module in a TEE environment; the active measurement module in the TEE environment measures the behavior characteristics of the measurement object according to the active measurement strategy library to obtain a corresponding active measurement result, and returns the active measurement result to the active measurement agent in the REE environment; and the active measurement agent in the REE environment receives the returned active measurement result. Compared with a traditional measurement method, the method has higher software behavior measurement capability, better operation efficiency and better security strength, can guarantee credible operation of the software, supports initiative measurement of real-time operation behaviors of the software, and has highermeasurement capability compared with an existing method.

Description

technical field [0001] The invention relates to computer security technology, in particular to a method and system for actively measuring software behavior based on TEE. Background technique [0002] In recent years, as the computing power of computer equipment continues to increase, more and more applications are carried, resulting in increasing security risks, such as user information theft, tampering, abuse, counterfeiting, implanting viruses, sabotage, and eavesdropping The continuous occurrence of malicious attacks such as fraud, paralysis, etc. has brought severe challenges to the information security system. On the one hand, according to the statistics of the National Internet Emergency Response Center, since 2019, the number of hosts infected with computer malicious programs in my country has exceeded 2.4 million, and the number of infected malicious programs has exceeded 40,000. Problems such as web phishing, website backdoors, and web page tampering are still relat...

AI Technical Summary

Problems solved by technology

It can be seen that the security challenges faced by the operating system and its upper-layer applications are relatively serious, and the total number of security incidents has exceeded 90%.

Images