基于硬件资源访问控制的固件恶意行为研究  

Research on malicious behavior of firmware based on hardware resources access control

作　　者：张翠艳[1] 张平[1] 胡刚[1] 薛亮[1] 

机构地区：[1]解放军信息工程大学信息工程学院,郑州450002

出　　处：《计算机应用研究》2011年第7期2709-2711,2714,共4页Application Research of Computers

基　　金：国家"863"计划资助项目(2009AA01Z434)

摘　　要：固件与传统的应用软件一样,都有可能存在木马、后门、逻辑炸弹等具有恶意行为的代码。由于固件具有硬件相关性、任务执行的阶段性与高内聚性等特点,使得传统的程序恶意行为描述方法不能适用于固件程序。探讨了固件程序及固件恶意行为的特点和本质特征,描述了一种基于硬件资源访问控制策略的固件程序恶意行为形式化建模和检测方法,并对该方法的有效性进行了实验验证。As same as the traditional application and system software,firmware also faced the risk of malicious code like hobbyhorse,back door,logical bomb and so on.Firmware exhibited strong cohesion and hardware relativity,which make the malicious action in firmware to be different from that in the traditional software.This paper analyzed the specificities of firmware and the malicious behavior about it,then expatiated the essence of the malicious behavior of the firmware,and presented a firmware formal definition and detecting method which was based on the hardware resources access control policy.Experimental results prove that the method is effective to detect the malicious firmware.

关 键 词：固件恶意行为 用户意愿 硬件资源访问控制 恶意固件检测 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]