硬盘固件病毒的工作原理及防治方法  

Discussion on the hard disk firmware virus work principle and prevention methods

作　　者：张京生[1] 韩劲松[1] 

机构地区：[1]北京信息科技大学数据恢复研究所,北京100101

出　　处：《北京信息科技大学学报（自然科学版）》2013年第1期42-46,55,共6页Journal of Beijing Information Science and Technology University

基　　金：北京市教委科研水平提高专项(5208110900)

摘　　要：根据硬盘固件工作原理,从病毒的隐蔽性、破坏性、传染性、潜伏性4个方面分析了硬盘固件病毒的行为特征以及常见破坏方式,提出多种理论上可行的硬盘固件病毒检测与防治方法。融合完整性监测特征码识别、协议过滤等方法,设计了一种带有硬件接口的硬盘固件病毒防治系统,可以有效阻止硬盘固件病毒的传播与发作,同时具有良好的向前兼容性,方便日后的功能升级与扩展。This paper is based on the analysis of principle of hard disk firmware, from the virus hidden, destructive, infectious, latent four aspects, had given a brief description of the behavioral characteristics of the hard drive firmware virus and common destructive manner, and made a variety of theoretically possible hard disk firmware virus detection and control methods. In addition, the end of the article also had given an idea about the hard disk firmware, virus prevention system with a hardware interface, the system can effectively prevent the spread and the execution of the hard drive firmware virus, and has good forward compatibility, to facilitate future upgrade and expansion of the function.

关 键 词：硬盘固件 病毒 主动防御 

分 类 号：TP309.3[自动化与计算机技术—计算机系统结构]