摘要
主动防御技术的出现弥补了传统的病毒扫描技术和防火墙技术的不足,给计算机系统提供了更加严密的保护。首先阐述了基于行为分析的主动防御技术的原理和实现,然后从几个方面对其脆弱性进行了分析,并研究了突破这种主动防御系统的可行性,最后提出了一些方法来增强主动防御。
The emergence of active defence technology makes up the pitfalls of tradition virus scan and firewall technologies, and gives an all - around protection on computer system. First,the principle and implementation of active defence technology based on behaviour analyzing are discussed, and then the vulnerabilities of this technology are analyzed from several aspects, the possibility of breaking through the system of active defence technology are studied as well, and at last several methods are presented for strengthening the active defence technology.
出处
《计算机应用与软件》
CSCD
2009年第7期269-271,共3页
Computer Applications and Software
基金
国家863高技术研究发展计划基金项目(2006AA01Z431)
关键词
主动防御
病毒扫描
防火墙
挂钩
SSDT
Active defence
Virus scan
Firewall
Hook
System service descriptor table
