摘要
对计算机中的异常干扰进行检测,能够有效提高计算机使用安全性。对计算机干扰的检测,需要先干扰计算机隐藏关系,使得异常干扰最终运行结果能够明显区别,完成计算机检测。传统方法采用交叉观察法,利用不同方式对系统信息进行获取,并通过对比来进行检测,但忽略了对隐藏干扰的运行结果进行明显区别。提出新的隐藏关系下计算机异常干扰检测方法,以计算机中Bootkit异常干扰为例,在隐藏关系下基于对干扰检测的研究,更好揭示异常干扰的本质。通过干扰其隐藏关系,使异常干扰的最终运行结果能够区别,来达到检测干扰的目的。确定检测方法的三要素:检测源、检测路径、检测对象,实现基于隐藏关系的计算机内异常干扰检测。仿真结果表明,该检测方法具有良好的通用性和有效性,鲁棒性较强,能够投入到实际应用中。
In this paper, we propose a new method for detection on abnormal interference of computer based on hidden relation. Firstly, Bootkit abnormal interference in computer is used as an example and interference detection in hidden relation is researched to reveal essence of abnormal interference. By interfering with its hidden relation, fi- nal operation results of abnormal interference could be distinguished to achieve purpose of detecting interference. Three elements of detection method are determined： detection source, detection path, and detection object. Abnormal interference detection in computer based on hidden relation is realized. Simulation results show that the proposed method has good generality and effectiveness. It has strong robustness and can be put into practical application.
出处
《计算机仿真》
北大核心
2018年第1期424-427,440,共5页
Computer Simulation
关键词
隐藏关系
计算机异常
检测方法
Hidden relation
Computer
anomaly
Detection method
