动态代码的实时可信传递研究

 基于可信计算技术的恶意代码防范机制可以弥补传统杀毒方式对未知恶意代码防范能力的不足,但是软件自动在线升级和补丁安装会生成和调用未知的动态代码,对这些动态代码的实时可信判定问题阻碍了可信计算技术的应用普及.动态代码实时可信判定和可信传递方法(Trust Determination and Transitivity Method of Dynamic codes,TDTMD)从代码的调用环境和调用方式出发,对动态代码的来源是否可信进行判定,进而对动态代码是否可信进行判断.TDTMD可以在保证应用软件和系统的运行连续性前提下,提供对各种已知或未知恶意代码攻击的有效防范能力.TDTMD的原型系统及其实验结果表明,它对系统的运行性能影响较小,并且安全有效.

Research on Real-Time Transitive Trust for Dynamic Codes

The anti-virus mechanism based on trusted computing technology can complement the traditional anti-virus methods in resisting various known or unknown malicious codes.However,the automatic software on-line upgrade and patch installation obstructs this new anti-virus technology from entering popular use in practical systems,because these dynamic codes are not known to the system before they are called and will therefore be refused to run.TDTMD (Trust Determination and Transitivity Method of Dynamic codes) is a real-time method presented to determine whether a dynamic code is from a trusted source based on its called environments and modes,and by this way to determine whether to trust the unknown dynamic software.TDTMD not only protected user systems from malicious codes,but also improved the continuity of application and system.The prototype implemented had proved its small impact on system performance and its effectiveness of resisting malicious codes.