基于密码隔离的恶意代码免疫模型

A Crypto-based Immunization Model against Malicious Code

基于访问控制的恶意代码防御模型对恶意代码实行的是逻辑隔离,它可能被旁路且防御效果受限于访问控制策略的有效性。本文基于密码学原理建立了一个恶意代码免疫模型,以克服逻辑隔离的脆弱性;定义了代码植入规则、保护规则和执行规则,实现代码存储和执行的安全;证明了在系统初态安全且代码加、解密密钥安全的条件下,任何时刻恶意代码都不会被执行和传播。

Access control based malicious code defending model has vulnerabilities because it may be circumvented in certain circumstances. In addition, its effectiveness depends on that of the access control policy applied. A crypto-based security model against malicious code is proposed which defined secure operation rules for executable code planting, protection, and execution. It is proved that if the initial system state is secure and the crypto keys for code protection are secure also, the proposed model will be able to protect system from being infected and be able to prevent subjects from invoking malicious codes, thus to stop malicious code from spreading.