网络信息安全特种保障初探

A preliminary research on special assurance of network information security

提出了特种保障的概念 ,分析了国家信息安全的危害因素 ,主要有CPU隐含指令、后门、恶意软硬件等 .通过研究非自主开发的计算机系统中的系统恶意功能集和触发条件集以及可以发现恶意功能的协议数据序列 ,给出了两种恶意功能的检测方法 ,即激励响应检测法和特征匹配检测法 .

Some factors that would endanger the national information security were analyzed. They included CPU hiding instructions, trapdoor and vicious software/hardware, etc. Through research on system vicious functions, trigger functions and protocol data sequence capable to find the vicious functions of dependent computer system, two methods were introduced to check the vicious functions, namely, stimulus response and pattern matching, and measures to prevent network vicious functions were suggested.