基于Linux主机的USB设备安全监控系统设计  

Design on Security Monitoring System of USB Device Based on Linux Host

作　　者：段佳林 

机构地区：[1]中华通信系统有限责任公司河北分公司,河北石家庄050081

出　　处：《计算机与网络》2017年第20期64-67,共4页Computer & Network

摘　　要：基于Linux主机和USB设备的特点,阐述了Linux主机USB设备安全监控的概念和特点,分析了设计该系统所用的关键技术。在此基础上,以Linux内核模块为载体,设计了一种Linux主机USB设备安全监控系统,该系统可以实现对接入Linux主机的USB设备进行禁止模式、读写模式、只读模式和只写模式细粒度监控,切实保护Linux主机中USB设备的安全。实践表明,该系统可有效地对接入国产麒麟操作系统的USB设备进行监控,切实保护了接入USB设备的安全。Based on the characteristics of the Linux host and USB devices, this paper first introduces the concepts and features of Linux host USB device monitoring system, and analyzes the key technologies of this system. On this basis, the security monitoring system of Linux host USB device is designed with Linux kernel module as the carrier, which allows the fine-grained monitoring. Moreover, there are four modes that effectively protect the security of Linux host USB device： forbidden mode, read-write mode, read-only mode and write-only mode. The practical results show that the designed system can effectively monitor the USB devices which access to the domestic operating system-Kylin, and ensure the access security of USB device

关 键 词：LINUX主机 USB设备监控 可加载的内核模块 HOOK NETLINK 

分 类 号：TP277[自动化与计算机技术—检测技术与自动化装置] TP316.81[自动化与计算机技术—控制科学与工程]