Design and implementation of Mandatory Hardware Confirming Control model

摘要

The latest Trojan increasingly becomes more covert, develops toward the hidden file, hidden process, hidden communication direction, and its combination with system closer. It is difficult for antivirus software to distinguish between user's own legitimate operations and Trojan's illegal operations. According to the anti-repudiation characteristic of network business's operation, we propose the Mandatory Hardware Confirming Control technology based on confirmations of host's hardware signal. By controlling host's operating system kernel device drivers and I/O controllers and establishing the list called "hardware confirmation of special processes list", Mandatory Hardware Confirming Control technology monitors special processes real-timely and allows special processes running by confirmation of hardware keyboard signal, realizes anti-repudiation of special processes.