UNIX主机文件完整性校验工具的原理与实现

THE PRINCIPLE AND IMPLEMENTATION OF AN INTEGRITY CHECKER FOR UNIX HOST FILES

文件系统完整性校验是一种基于主机的入侵检测技术,可以检测出入侵者对主机文件的非法修改。介绍了文件完整性校验的原理,并详述了所开发的文件系统完整性校验工具的关键实现技术。

File system integrity checkout is a host-based intrusion detection technique which can check out the unauthorized modification of the host files by intruders. This paper introduces the principle of this technique, and describes in detail the key implementation of a file system integrity checker developed by us.