A supervision method and storage medium for a trusted process

Abstract

The present disclosure relates to the field of network information security, and discloses a supervision method and storage medium for a trusted process. The method is applied to a node server, and comprises: determining a process file corresponding to a process file path, and calculating a trusted process file fingerprint of the process file according to a preset period, and calculating the trusted process file fingerprint when a Linux system tool detects that the process file has changed, comparing the calculated trusted process file fingerprint with an original trusted process file fingerprint, determining a fingerprint increment based on the comparison result, pausing the running of the process file if the fingerprint increment indicates that the fingerprint of the process file has changed, and judging whether the fingerprint increment is within a preset increment range, so that a management server generates feedback information based on the judgment result, and determining whether to run the process file based on the feedback information of the management server. The above method of monitoring whether the content corresponding to the process file has been tampered with ensures the security of the process file.

Images