Dynamic measuring method based on dependable computing and management system

Abstract

The invention discloses a dynamic measuring method based on dependable computing and a management system. The management system interacts with a user through a user management interface of an operation system and application programs. The management system comprises a dynamic measurement control module interacting with the operation system, wherein the dynamic measurement control module controls a judgment module, an audit module and a measuring module, the judgment module obtains a latest measurement result from the audit module and judges whether the operation system is dependable or not according to a strategy, the measuring module is responsible for detecting the dependable state of the operation system in operation, the audit module is responsible for calculating, storing and reporting measurement results in a classified mode, the control module is responsible for configuring external management programs to other modules, sending system state information to the external management programs and providing access ports of trusted software special hardware for the modules. The management system works in a kernel layer, the system can guarantee integrity of the modules once starting static measurement, and credibility and safety are improved.

Description

technical field [0001] The invention relates to a trusted computer network system, in particular to a trusted computing-based dynamic measurement method and a trusted computing-based dynamic measurement management system. Background technique [0002] While the popularization of information network brings convenience to people's work and study, it also poses a huge security threat. Viruses, Trojan horses, rootkits, etc. are ubiquitous in the current computer network. Traditional security protection methods cannot achieve computer security, and the confidentiality, integrity, and availability of information systems cannot be guaranteed. [0003] Traditional security protection methods adopt passive defense mechanisms against attack methods, relying on the characteristics of attack methods, causing them to always lag behind new attacks. This will only lead to higher and higher system firewalls, more complex intrusion detection, The malicious code base is getting bigger and bi...

AI Technical Summary

Problems solved by technology

Existing static metrics only play a role when the platform starts, and cannot prevent malicious code injection at runtime, and cannot guarantee the integrity of the system at runtime

Images