基于动态信息流追踪技术的运行时安全隐患监测模块设计

摘要

The main way to compromise the security of computer is to obtain the unauthorised access of the system through vulnerabilities of the operating systems or applications for achieving the purpose of malicious attacks. In view of this, in this paper we implement a security monitor module at runtime. Based on dynamic information flow tracking technology, this module dynamically detects and records the information flow of the program by analysing the contents in the memories and registers when the program is running, so as to realise the positioning and prevention of the malicious attacks.%威胁计算机安全的主要途径是通过操作系统或者应用程序的漏洞来获取对系统的非授权访问,进而达到恶意攻击的目的.针对这一问题,实现一种运行时安全隐患监测模块,该模块在动态信息流追踪技术的基础上,通过分析程序运行时内存和寄存器中的内容,动态地检测和记录程序的信息流,从而实现对恶意攻击的定位和预防.