主机入侵防御系统中系统访问控制  

System Access Control in Host Intrusion Prevention System

作　　者：乔佩利[1] 贾俊新[1] 

机构地区：[1]哈尔滨理工大学计算机科学与技术学院,黑龙江哈尔滨150080

出　　处：《哈尔滨理工大学学报》2008年第5期79-82,86,共5页Journal of Harbin University of Science and Technology

摘　　要：对Windows系统下的系统关键资源实施增强访问控制进行了研究,提出了一种能够对系统关键资源进行有效保护的系统访问控制方法,采用Windows驱动程序技术和核心级系统调用截获与控制技术,对文件、注册表、进程等关键资源实施增强的访问控制.经实验表明,在Win-dows主机上安装本系统,可有效提高系统的安全性,实现对文件、注册表、进程等系统关键资源的保护.This paper carries on a thorough research on the access control of the key resource on the Windows OS, and put forward a kind of method of protecting the key resources of the system, which adopts the technique of Windows drivers and system call interception in kernel, implementing the strengthen access control of the key re- sources such as the file, register table and progress. Installing this system on the Windows host, can raise the safety of the system effectively, protect the system key resources such as the file, register table and progress. It was proved by practical experiments.

关 键 词：主机入侵防御系统 访问控制 系统调用截获 关键资源 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]