基于Windows Vista的IE保护模式潜在弱点分析  

Analysis on potential vulnerability of IE protected mode in Windows Vista

作　　者：王帅[1] 刘胜利[1] 

机构地区：[1]解放军信息工程大学信息工程学院

出　　处：《计算机工程与设计》2010年第18期3960-3963,共4页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2008AA01Z420)

摘　　要：为提高WindowsVista平台上Internet Explorer7程序的安全性能,提出了基于IE保护模式架构的安全性增强方案设计方法。对Windows Vista系统访问控制机制和Internet Explorer 7程序进行了认知与分解,指出IE保护模式架构在执行用户界面特权隔离策略时所存在的安全隐患,并分析该隐患所导致的攻击者可绕过IE保护模式限制非法访问用户资源等安全威胁。最后根据该弱点成因设计并实现了一套IE保护模式安全性增强组件,实验结果表明了该设计的可行性和有效性。In order to improve the security abilities of Intemet Explorer 7 programs on Windows Vista, a method enhancing security based on IE protection mode architecture is presented. Firstly, this text made a reorganization of system access control mechanism on Windows Vista and Internet Explore 7, at the same time, decomposed both of them. Secondly, the security vulnerability oflE protection mode architecture is pointed out when executed user interface privilege isolation policies. And the security threats resulted from it is analyzed such as the attackers might illegally access the user resources bypassing the limitation of IE protection mode. Lastly, this text designed and realized a suit of components which can enhance the security of IE protection mode according to the cause of this vulnerability, and verified the feasibility and efficiency of it.

关 键 词：强制完整性控制 用户界面特权隔离 用户账户控制 IE保护模式 WINDOWS VISTA 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]