新型虚拟桌面杀毒模型  

New virtual desktop antivirus model

作　　者：展旭升[1] 高云伟[2] 冯百明[1] 蒋芸[1] 杨鹏斐[1] 

机构地区：[1]西北师范大学计算机科学与工程学院,兰州730070 [2]中国科学院计算技术研究所,北京100190

出　　处：《计算机应用》2012年第12期3445-3448,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61163036);中国科学院计算机体系结构重点实验室项目(CARCH201105);甘肃省科技支撑计划项目(1104GKCA023)

摘　　要：针对现有杀毒方式系统开销大,占有网络带宽大,以及没有对未知程序的实时监测等缺点,通过对先前工作进行改进,提出了针对虚拟桌面框架的一种新型虚拟桌面杀毒模型,支持用户主动扫毒和程序启动过程的被动杀毒。特权虚拟机执行病毒检测和可信列表的管理,并将每个普通虚拟机中的文件签名传输到其他虚拟机;客户端分析待检测文件的签名和特性,优化网络传输的字节数,并在程序加载时实时查杀病毒。实验结果表明,该模型能够实时查杀病毒,减少系统开销和网络带宽的占用。The existing antivirus methods take too much system overhead,consume a lot of network bandwidth and can not detect the unknown programs in time.Therefore,this paper improved the previous work and presented a new virtual desktop antivirus model regarding virtual desktop infrastructure.It supported active antivirus and passive antivirus moves.Privileged virtual machines were used to scan viruses,manage the trust-list and transmit signatures of every virtual machine to others.Agents were used to analyze the signatures and characteristics of files,optimize the bytes to be uploaded and scanned,and scan the programs timely when being loaded.The experimental results show that model can detect viruses in real-time,in the meantime reduce system overhead and network bandwidth usage.

关 键 词：虚拟桌面 主动扫毒 被动杀毒 可信列表 签名 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]