基于行为分析的主动防御技术及其脆弱性研究  

ON ACTIVE DEFENCE TECHNOLOGY BASED ON BEHAVIOUR ANALYZING AND ITS VULNERABILITIES

作　　者：罗晓波[1] 王开建[1] 徐良华[1] 

机构地区：[1]江南计算技术研究所,江苏无锡214083

出　　处：《计算机应用与软件》2009年第7期269-271,共3页Computer Applications and Software

基　　金：国家863高技术研究发展计划基金项目(2006AA01Z431)

摘　　要：主动防御技术的出现弥补了传统的病毒扫描技术和防火墙技术的不足,给计算机系统提供了更加严密的保护。首先阐述了基于行为分析的主动防御技术的原理和实现,然后从几个方面对其脆弱性进行了分析,并研究了突破这种主动防御系统的可行性,最后提出了一些方法来增强主动防御。The emergence of active defence technology makes up the pitfalls of tradition virus scan and firewall technologies, and gives an all - around protection on computer system. First,the principle and implementation of active defence technology based on behaviour analyzing are discussed, and then the vulnerabilities of this technology are analyzed from several aspects, the possibility of breaking through the system of active defence technology are studied as well, and at last several methods are presented for strengthening the active defence technology.

关 键 词：主动防御 病毒扫描 防火墙 挂钩 SSDT 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] O174[自动化与计算机技术—计算机科学与技术]