基于Rootkit技术的终端安全防护研究

The Study of Terminal Security based on Rootkit Technology

信息化的深入发展,给信息安全带来严峻挑战,也使得终端安全防护成为目前信息安全领域亟待解决的问题。深入分析了Rootkit技术,提出基于Rootkit对终端进行自身防护和安全监控,包括注册表、文件、进程的保护、隐藏、监控,打印、网络的管理以及文件加密,对终端进行全面的安全防护。

With the development of information,How to ensure the terminal security is the critical problem in the information security field.In this article,the Rootkit technology is analyzed widely.What＇s more,the method to achieve terminal security based on Rootkit is studied,including protecting registry,file and process,hiding process,monitoring file and process,managing the print and network and encrypting file.