Method and device for detecting system bootstrap area abnormity
A detection system and system guidance technology, which is applied in the directions of boot programs, program control devices, computer security devices, etc., can solve the problems of detecting abnormalities in the guiding area of the system and being unable to effectively detect abnormalities in the guiding area of the system, and achieve accurate and comprehensive and effective detection, The effect of simple detection method
Inactive Publication Date: 2021-04-30
安芯网盾(北京)科技有限公司
View PDF4 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
[0004] In order to solve the above technical problems, the present invention proposes a method and device for detecting abnormalities in the boot area of the system to solve the technical problem that the prior art cannot effectively detect abnormalities in the boot area of the system
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0050] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with specific embodiments of the present invention and corresponding drawings. Apparently, the described embodiments are only some of the embodiments of the present invention, but not all of them. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.
[0051] combine first figure 1 The flow chart of the method for detecting the abnormality of the boot area of the system according to an embodiment of the present invention is illustrated. Such as figure 1 As shown, the method includes the following steps:
[0052] Step S1, when the current operating system is started by BIOS, obtain the available physical mem...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The invention provides a method and device for detecting abnormity of a system boot area. The method comprises the steps: S1, obtaining the size of an available physical memory in a real mode when a current operating system is started through a BIOS, and enabling the size of the available physical memory to serve as a first value; s2, according to the version of the current operating system, obtaining the size of a normal physical memory accessible to a real mode corresponding to the version, and taking the size of the normal physical memory as a second value; and S3, comparing the first value with the second value, and if a comparison result is inconsistent, detecting that the bootstrap area of the current operating system is abnormal. According to the scheme of the invention, the abnormity of the system guide region can be detected more comprehensively.
Description
technical field [0001] The invention relates to the field of computer information security, in particular to a method and device for detecting abnormalities in the boot area of a system. Background technique [0002] When the existing computer operating system is started through the BIOS, the code in the system boot area may be maliciously modified. In this case, the starting speed of the operating system may be slowed down, or even unable to start. In some extreme cases, the operating system may be maliciously hijacked, causing huge losses to users. [0003] Existing methods for detecting abnormalities in the system boot area usually use anti-virus software to scan viruses, and anti-virus software is usually based on file scanning, but there are no files in the system boot area, so the scanning effect of using anti-virus software to scan it is not good. Well, it is impossible to effectively detect system boot sector abnormalities. Contents of the invention [0004] In...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Applications(China)
IPC IPC(8): G06F21/56G06F9/4401
CPCG06F9/4401G06F21/562G06F21/566
Inventor 代鹏
Owner 安芯网盾(北京)科技有限公司