Windows Bootkit实现及其检测系统设计

作为新型的劫持系统内核技术,Windows Bootkit具有较强的隐蔽性和免杀能力,引发了严峻的计算机安全问题。通过分析研究Windows Bootkit的实现方式,并结合可信计算检测原理,设计了一种基于可信计算技术的Windows Bootkit检测系统,应用结果表明,该系统能检测出各种形式的Windows Bootkit,可有效增强Windows操作系统下计算机的安全性。

Windows Bootkit Implementation and its Detection System Design

As a new hijack system kernel technology,the Windows Bootkit is more hidden and has stronger ability to avoid to be killed by anti-virus,which has caused severe computer security problems.By analyzing the implementation of the Windows Bootkit,combined with trusted computing detection principle,design a Windows Bootkit detection system based on trust computing technology.The application results show that the system can detect various forms of Windows Bootkit,and can effectively enhance computer’s security on the Windows operating system.