微型机与应用
微型機與應用
미형궤여응용
MICROCOMPUTER & ITS APPLICATIONS
2013年
20期
51-53,56
,共4页
网络信息安全%进程防火墙%虚拟磁盘技术%非法信息流%内核钩子%过滤代价
網絡信息安全%進程防火牆%虛擬磁盤技術%非法信息流%內覈鉤子%過濾代價
망락신식안전%진정방화장%허의자반기술%비법신식류%내핵구자%과려대개
network information security%process firewall%virtual disk technology%illegal information flow%kernel hooks%filtering cost
提出一种在虚拟磁盘中对文件映像前后的访问进程进行监控并对非法信息流进行过滤的方法。该方法在关键字或特征信息提取过程中安装各种钩子并对接入主机进行审计，用来提高系统服务器的包转发速率与非法信息的捕捉能力。其目的是阻止病毒或木马程序对文件破坏或数据包劫持，保证信息接入的可控性和安全性。实验测试表明，系统降低了包转发时延，提高了包转发速率和非法信息的识别能力。
提齣一種在虛擬磁盤中對文件映像前後的訪問進程進行鑑控併對非法信息流進行過濾的方法。該方法在關鍵字或特徵信息提取過程中安裝各種鉤子併對接入主機進行審計，用來提高繫統服務器的包轉髮速率與非法信息的捕捉能力。其目的是阻止病毒或木馬程序對文件破壞或數據包劫持，保證信息接入的可控性和安全性。實驗測試錶明，繫統降低瞭包轉髮時延，提高瞭包轉髮速率和非法信息的識彆能力。
제출일충재허의자반중대문건영상전후적방문진정진행감공병대비법신식류진행과려적방법。해방법재관건자혹특정신식제취과정중안장각충구자병대접입주궤진행심계，용래제고계통복무기적포전발속솔여비법신식적포착능력。기목적시조지병독혹목마정서대문건파배혹수거포겁지，보증신식접입적가공성화안전성。실험측시표명，계통강저료포전발시연，제고료포전발속솔화비법신식적식별능력。
The paper presents a method that monitors the access process of the virtual disk file image before and after and using illegal information flow filter drivers . There install a lot of host audit hooks on host audit system during the extraction of the keywords or characteristic information , in order to improve the packet forwarding rate of the server and the capturing ability of ille-gal information . Its purpose is to prevent document from destruction by virus or Trojan program , and achieve controllability and safe-ty in information access . Finally , we perform an experiment through IxLoad . The results of the experiment show that the system can reduce the packet forward delay , improve the packet forwarding rate and better the recognizing ability of illegal information .
