一个基于引用监控机的内核完整性保护方法  

Novel approach for protecting integrity of kernel based on reference monitor

作　　者：孟江涛[1] 卢显良[1] 田荣华[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,四川成都610054

出　　处：《计算机应用》2006年第5期1071-1074,共4页journal of Computer Applications

基　　金：信息产业部电子发展基金资助项目(信部运[2002546])

摘　　要：运用引用监控机的概念和虚拟机监控器的功能,提出了一种新的保护内核完整性的方法。该方法在虚拟机监控器中增加了引用监控模块,使之成为引用监控机;让客户操作系统内核以非特权模式运行在引用监控机上,使其对某些资源的修改操作必须经过运行于特权模式的引用监控机的验证,从而阻止恶意代码修改内核。与传统的防御恶意代码的方法相比,传统方法只能检测出内核完整性已被破坏,不能阻止恶意代码对内核的修改。With concept of reference monitor and function of virtual machine monitor, a novel approach for protecting integrity of kernel was designed. In the design, a virtual machine monitor was used as reference monitor by our adding reference monitor module into it. Guest operating system kernel runs on the top of the reference monitor as non-privileged mode. When the non-privileged kernel attempts to write some resources, it is mandatory for the writing permission to be verified and approved by the reference monitor running in privileged mode. So, it prevents malicious code from tampering the kernel. Compared to the traditional defense methods against malicious code, these traditional methods only can detect integrity of kernel, but not prevent it from tampering the kernel.

关 键 词：引用监控机 内核完整性 可加载内核模块 虚拟机监控器Xen 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]