进程运行时完整性度量的体系结构设计  

Design of an Architecture for Process Runtime Integrity Measurement

作　　者：李霄[1,2] 石文昌[1,2] 梁朝晖[1,2] 梁彬[1,2] 单智勇[1,2] 

机构地区：[1]数据工程与知识工程教育部重点实验室(中国人民大学),北京100872 [2]中国人民大学信息学院,北京100872

出　　处：《微电子学与计算机》2009年第9期183-186,共4页Microelectronics & Computer

基　　金：国家自然科学基金项目(60873213;60703103);国家"八六三"计划项目(2007AA01Z414);北京市自然科学基金项目(4082018)

摘　　要：针对当前进程完整性度量方法存在的不足,提出一个基于TPM安全芯片的进程运行时完整性度量的体系结构及其原型系统Patos-RIP,用以度量进程从创建到死亡的整个生命周期中的完整性.Patos-RIP不再局限于静态检测能力,它能检测出在进程运行过程中篡改进程完整性的攻击事件,提高了系统的安全性,同时保持了系统的灵活性和兼容性.In consideration of inadequacy of existing methods for process integrity measurement, an architecture with its prototype system （Patos- RIP）, which is based on TPM security chips, is proposed to measure process runtime integrity. Paying attention to the whole lifetime of a process, Patos - RIP is not limited to static analysis ability. It can detect attack events that may affect process integrity when a process is running. It can improve security of a system, and at the same time, keep flexibility and compatibility of the system.

关 键 词：操作系统 进程完整性 运行时度量 TPM 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]