Windows Bootkit实现及其检测系统设计  

Windows Bootkit Implementation and its Detection System Design

作　　者：杨夕凯[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074

出　　处：《计算机安全》2012年第5期51-54,共4页Network & Computer Security

摘　　要：作为新型的劫持系统内核技术,Windows Bootkit具有较强的隐蔽性和免杀能力,引发了严峻的计算机安全问题。通过分析研究Windows Bootkit的实现方式,并结合可信计算检测原理,设计了一种基于可信计算技术的Windows Bootkit检测系统,应用结果表明,该系统能检测出各种形式的Windows Bootkit,可有效增强Windows操作系统下计算机的安全性。As a new hijack system kernel technology,the Windows Bootkit is more hidden and has stronger ability to avoid to be killed by anti-virus,which has caused severe computer security problems.By analyzing the implementation of the Windows Bootkit,combined with trusted computing detection principle,design a Windows Bootkit detection system based on trust computing technology.The application results show that the system can detect various forms of Windows Bootkit,and can effectively enhance computer＇s security on the Windows operating system.

关 键 词：WINDOWS BOOTKIT 可信计算 安全检测 

分 类 号：TP316.7[自动化与计算机技术—计算机软件与理论]