针对移动终端对病毒防治的高效率和轻量级需求,运用云安全技术对主机入侵防御系统(HIPS)进行改进,形成一种云监控模型.增加文件判断功能、将规则库和文件判断工作移至云端服务器,降低了系统占用,轻量化了客户端；改变规则制定策略,针对不同病毒制定不同规则,降低了规则的复杂性,提高了规则匹配效率；通过黑白名单技术和单步危险行为分析法,降低了客户端与服务器的通信代价,提高了文件判断效率；改变系统监测模式,变主动监控为被动监控,降低系统监测的工作时间,提高了云监控模型的工作效率.最后通过形式化方法证明了云监控模型的安全性.%Aiming at the demand of the high efficiency and lightweight client of virus prevention for mobile terminal, this paper improved the HIPS by the technology of cloud security to form the cloud monitoring model. Through adding file property judge function and moving rule library and the work of file property judge to the server, the server system occupies was reduced. Through changing the strategy of rule-making, according to different virus set different rules, the complexity of the rules was reduced and the efficiency of rules matching was improved. Through the black and white list technology and a single step dangerous behavior analysis, the cost of communication between the client and server was reduced and the efficiency of file property judge was improved. Through changing monitoring mode, changing the active monitoring to passive, the working time was reduced and the working efficiency of the cloud monitoring model was improved. Finally, the formal method proves the security of the cloud monitoring model.
展开▼
