| 计算机BIOS安全风险分析与检测系统研究 |
| |
| 引用本文： | 周振柳,刘宝旭,池亚平,许榕生.计算机BIOS安全风险分析与检测系统研究[J].计算机工程,2007,33(16):114-116. |
| |
| 作者姓名： | 周振柳 刘宝旭 池亚平 许榕生 |
| |
| 作者单位： | 1. 中国科学院高能物理所计算中心,北京,100049
2. 北京电子科技学院,北京,100070 |
| |
| 基金项目： | 国家自然科学基金
,
北京电子科技学院校科研和教改项目 |
| |
| 摘 要： | 介绍了计算机BIOS安全风险的形成及特点，总结了BIOS安全风险的分类，提出了BIOS安全威胁模型和基于BIOS安全隐患扫描和代码完整性度量的BIOS安全检测模型。实现了一个基于BIOS安全隐患库与BIOS标准代码样本库的BIOS安全检测系统。指出BIOS在信息安全基础解决方案中的进一步安全增强和安全扩展的研究方向。
|
| 关 键 词： | BIOS 安全风险 安全隐患 安全检测 |
| 文章编号： | 1000-3428（2007）16-0114-03 |
| 修稿时间： | 2006-08-29 |
Research on Computer BIOS Security Risk Analysis and Detection System |
| |
| ZHOU Zhen-liu,LIU Bao-xu,CHI Ya-ping,XU Rong-sheng.Research on Computer BIOS Security Risk Analysis and Detection System[J].Computer Engineering,2007,33(16):114-116. |
| |
| Authors: | ZHOU Zhen-liu LIU Bao-xu CHI Ya-ping XU Rong-sheng |
| |
| Affiliation: | 1. Computing Center, Institute of High Energy Physics, Chinese Academy of Sciences, Beijing 100049; 2. Beijing Electronic Science and Technology Institute, Beijing 100070 |
| |
| Abstract: | This article introduces the progress and characteristics of BIOS security threat, summarizes the BIOS security risk classification, advances a model of BIOS security threat and a model of BIOS security detection which based on scanning of BIOS vulnerabilities and measuring of BIOS code integrity. A BIOS security detection system, based on the libraries of BIOS vulnerabilities and BIOS standard code samples, is implemented. Further study directions about enhancing and extending BIOS security role in information security fundamental solution ale also presented. |
| |
| Keywords: | BIOS security risk security vulnerability security detection |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程》浏览原始摘要信息 |
|
点击此处可从《计算机工程》下载全文 |
