CAJ | 학술논문

计算机病毒给当今社会造成了较大危害,为了有效防止病毒蔓延,针对当前防病毒软件存在的不足,给出了一种基于文件过滤驱动的文件型病毒防护方法.分析了文件过滤驱动原理,通过在文件系统驱动上层附加一层过滤驱动,来截获上层应用对文件的各种操作,阻止可疑应用程序对可执行文件的写操作,达到主动防御文件型病毒的目的.文章从病毒对文件的打开、写入、关闭以及用户层和驱动通信等方面给出了该方法的实现原理.实验证明该方法能够有效对文件型病毒进行防护.
계산궤병독급당금사회조성료교대위해,위료유효방지병독만연,침대당전방병독연건존재적불족,급출료일충기우문건과려구동적문건형병독방호방법.분석료문건과려구동원리,통과재문건계통구동상층부가일층과려구동,래절획상층응용대문건적각충조작,조지가의응용정서대가집행문건적사조작,체도주동방어문건형병독적목적.문장종병독대문건적타개、사입、관폐이급용호층화구동통신등방면급출료해방법적실현원리.실험증명해방법능구유효대문건형병독진행방호.
Computer virus is harmful to society. In view of the defect of the virus detection method existing,a new method of virus pre-vention based on file system filter driver is brought forward to prevent computer virus propagation. Analyze the theory of file system filter driver. With attaching a filter driver to the file system driver to obtain upper application operating on the file of the disk,can prevent sus-picious application program to write on executable file. Thus implement the aim of active defense of the computer virus. Present the detail implementation of this method with opening,writing,closing the executable file by virus and commutation between application and driv-er. The result indicates that this method can prevent the computer virus spreading efficiently.