The embodiment of the invention provides a kernel integrity protection method and device,
electronic equipment and a medium, and relates to the technical field of computers.The method comprises the steps that when a to-be-executed file is executed, an abstract
list file of a target file
package to which the to-be-executed file belongs is searched from a specified cache space, the abstract
list file comprises an expected hash value of each file in the target file
package; if the to-be-executed file is found, searching an expected hash value of the to-be-executed file from the abstract
list file, and performing integrity
verification on the to-be-executed file based on the expected hash value; if the abstract list file is not found, obtaining a storage path of the abstract list file of the target file
package from the extension attribute of the to-be-executed file; caching the abstract list file to a specified cache space; and searching an expected hash value of the to-be-executed file from the abstract list file of the specified cache space, and performing integrity
verification on the to-be-executed file based on the expected hash value. According to the scheme, the
file verification efficiency can be improved, and the
system performance is prevented from being influenced.