基于细粒度访问控制的勒索软件防御系统设计

Design of Ransomware Defense System Based on Fine-Grained Access Control Scheme

勒索软件是网络犯罪的主要形式之一,危害着公共社会的安全。当前的防御方案主要通过访问控制,存在授权粒度太粗、权限管理不灵活和无法正确处理异常等缺陷。为了防御勒索软件、保护主机文件资源的安全,文章提出一个基于细粒度访问控制的勒索软件防御方案,该方案包括3个主要功能,首先对文件系统的细粒度动态的访问控制;然后通过上下文的程序意图进行分析;最后对异常进行分级确认。文章实现了方案原型,分析结果表明,该方案可以有效拦截勒索软件的文件行为,并且能够减小勒索软件带来的损失。

Ransomware has become one of the most dominant forms of cybercrime,endangering the security of public society.The goal of this paper is to defend against ransomware to protect the security of host file resources,but current defense schemes using access control schemes still have defects such as too coarse authorization granularity,inflexible permission management,and inability to properly handle exceptions.In this paper,a ransomware defense scheme based on fine-grained access control,which includes three main functions,firstly,fine-grained dynamic access control to the file system was proposed.Secondly program intent analysis by context.Finally hierarchical confirmation of exceptions.This paper implements a prototype of the scheme,which can effectively intercept the file behavior of ransomware after analysis and reduce the damage caused by ransomware.