A mobile security office method based on wmi software whitelist mechanism

Abstract

The invention relates to a safety mobile office method based on a WMI software whitelist mechanism and belongs to the technical field of terminal equipment safety office. The method is characterized in that the various attributes, serving as software attribute parameters, of software and setting number form an application software whitelist, system PE files during initial system installation of a computer form a system software whitelist, and the application software whitelist and the system software whitelist jointly form a global software whitelist; the global software whitelist is divided into the software whitelist of each department according to the requirements of the corresponding department, and the software whitelist is issued to the safety mobile office terminals of department staff; a user transmits a software request to a server end through an authentication code formed by a department identification code and a staff PIN code; a monitoring program is built on the basis of WMI on the corresponding safety mobile office terminal, the monitoring program performs starting detection on software installation and operation, comparison with the whitelist is performed, and installation and operation are allowed after the comparison is passed. Compared with existing application program mounting control methods, the method is good in stability, safety and compatibility, and mounting efficiency and operation efficiency are increased.

Description

technical field [0001] The invention belongs to the technical field of terminal equipment mobile office security, and relates to a mobile security office method based on a WMI software whitelist mechanism. technical background [0002] For general enterprises and institutions, the software used in daily life is closely related to the nature of work. Some specific enterprises and institutions, for security and confidentiality, only allow employees to use some specific software, which is convenient for unified management. The traditional way to control the operation of software is to prohibit employees from installing some irrelevant software. But in reality, employees will secretly download some chatting, stock trading, downloading software, etc. For the management, these software are "harmful" and unsafe. For the mobile security office system, it is particularly important to uniformly manage the software used by employees and only allow employees to run some specific softw...

AI Technical Summary

Problems solved by technology

Although this method can control the installation of application programs, it only judges the installation programs, and does not process the software programs that do not need to be installed but are directly run

At the same time, the black and white list only contains the application name and version number, therefore, malicious programs that modify the application name and version number can bypass the white list, which is less secure

Images