主机入侵防御系统中系统访问控制

对Windows系统下的系统关键资源实施增强访问控制进行了研究,提出了一种能够对系统关键资源进行有效保护的系统访问控制方法,采用Windows驱动程序技术和核心级系统调用截获与控制技术,对文件、注册表、进程等关键资源实施增强的访问控制.经实验表明,在Windows主机上安装本系统,可有效提高系统的安全性,实现对文件、注册表、进程等系统关键资源的保护.

System Access Control in Host Intrusion Prevention System

This paper carries on a thorough research on the access control of the key resource on the Windows OS,and put forward a kind of method of protecting the key resources of the system,which adopts the technique of Windows drivers and system call interception in kernel,implementing the strengthen access control of the key resources such as the file,register table and progress.Installing this system on the Windows host,can raise the safety of the system effectively,protect the system key resources such as the fi...