动态代码的实时可信传递研究  

Research on Real-Time Transitive Trust for Dynamic Codes

作　　者：李晓勇[1] 马威[1] 

机构地区：[1]北京交通大学计算机信息与技术学院,北京100044

出　　处：《电子学报》2012年第10期2009-2014,共6页Acta Electronica Sinica

基　　金：国家973重点基础研究发展计划(No.2007CB307101)

摘　　要：基于可信计算技术的恶意代码防范机制可以弥补传统杀毒方式对未知恶意代码防范能力的不足,但是软件自动在线升级和补丁安装会生成和调用未知的动态代码,对这些动态代码的实时可信判定问题阻碍了可信计算技术的应用普及.动态代码实时可信判定和可信传递方法(Trust Determination and Transitivity Method of Dynamic codes,TDTMD)从代码的调用环境和调用方式出发,对动态代码的来源是否可信进行判定,进而对动态代码是否可信进行判断.TDTMD可以在保证应用软件和系统的运行连续性前提下,提供对各种已知或未知恶意代码攻击的有效防范能力.TDTMD的原型系统及其实验结果表明,它对系统的运行性能影响较小,并且安全有效.The anti-virus mechanism based on masted computing technology can complement the traditional anti-virus meth ods in resisting various known or unknown malicious codes.However,the automatic software on-line upgrade and patch installation obslructs this new anti-virus technology from entering popular use in practical systems,because these dynamic codes are not known to the system before they are called and will therefore be refused to run. TDTMD （Trust Determination and Transitivity Method of Dynamic codes） is a real-time method presented to determine whether a dynamic code is from a masted source based on its called environments and modes,and by this way to determine whether to trust the unknown dynamic software. TDTMD not only protected user systems from malicious codes, but also improved the continuity of application and system. The prototype implemented had proved its small impact on system performance and its effectiveness of resisting malicious codes.

关 键 词：可信传递 恶意代码 动态代码 可信策略 运行连续性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]