摘要
固件与传统的应用软件一样,都有可能存在木马、后门、逻辑炸弹等具有恶意行为的代码。由于固件具有硬件相关性、任务执行的阶段性与高内聚性等特点,使得传统的程序恶意行为描述方法不能适用于固件程序。探讨了固件程序及固件恶意行为的特点和本质特征,描述了一种基于硬件资源访问控制策略的固件程序恶意行为形式化建模和检测方法,并对该方法的有效性进行了实验验证。
As same as the traditional application and system software,firmware also faced the risk of malicious code like hobbyhorse,back door,logical bomb and so on.Firmware exhibited strong cohesion and hardware relativity,which make the malicious action in firmware to be different from that in the traditional software.This paper analyzed the specificities of firmware and the malicious behavior about it,then expatiated the essence of the malicious behavior of the firmware,and presented a firmware formal definition and detecting method which was based on the hardware resources access control policy.Experimental results prove that the method is effective to detect the malicious firmware.
出处
《计算机应用研究》
CSCD
北大核心
2011年第7期2709-2711,2714,共4页
Application Research of Computers
基金
国家"863"计划资助项目(2009AA01Z434)
关键词
固件恶意行为
用户意愿
硬件资源访问控制
恶意固件检测
firmware malicious behavior
user＇s intention
hardware resources access control
malicious firmware detection
