一种基于代码块的指令级信息流机密性检查框架研究

Framework Based on Code-block for Information Flow Confidential Security Checking

二进制形式的第三方插件是威胁计算机安全的主要来源之一.经分析,目前可用于抵御第三方插件安全威胁的安全检查和分析机制具有较大局限性和低效性.对此本文给出一种静态扫描和运行时动态检查相结合的指令级信息流机密性检查框架,对其中的指令扫描与调谐、机密信息注册等关键问题给出具体解决方案,制定了示例安全策略,结合实验结果验证了该机制的可行性和有效性.

The BTPP（binary third part plugin） is one of the factors that destroy eomputer＇s security. Now those mechanisms that could be used to protect system from BTPP are limitary or inefficient. This paper gives one framework that combines static-scan with dynamic-checking to check information flow confidential security. Several important problems are resolved and this mechanism＇ s feasibility and validity are validated by experiments＇ results.