一种新的计算机抗攻击自身免疫模型  

New computer self-immune model against attack

作　　者：周正[1] 张俊[1] 沈昌祥[2] 

机构地区：[1]海军工程大学电气与信息工程学院,武汉430033 [2]海军计算技术研究所,北京100841

出　　处：《计算机工程与应用》2007年第16期12-15,共4页Computer Engineering and Applications

基　　金：国家863计划软件重大专项资助(the National HighTech Research and Development Plan of China under Grant No.2002AA1Z2101)。

摘　　要：提出了一种新的计算机抗攻击自身免疫模型,形式化地阐述了模型如何使得不合法的程序和代码不能够执行,合法的程序和代码不能够执行未授权访问;合法的程序和代码的可疑行为受到严格的控制但是可以根据不同的阈值来保证实用性。这种模型不需要计算和识别计算机攻击的具体特征,而通过直接消除攻击能够实施破坏和传播的前提条件,使得计算机系统对攻击具备自身免疫能力。A new computer self-immune model against attack is presented. And in a formal method,the paper expatiates on how the model can forbid the running of illegal programs and codes,the unauthorized access of legal programs and codes and how the model can control suspicious behavior of legal programs and codes strictly while can get practicability with different threshold values. Instead of detecting or recognizing the exact characters of attack,the model gives computer system the self-immune ability against attack by getting rid of the prerequisites for attack to do harm and spread.

关 键 词：执行集合 执行描述 执行规则函数 安全度量 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]