摘要： 提出了一种恶意代码防护方法,该方法能够限制来自不可信源(如网络、可移动磁盘等)的数据和执行代码的使用方式和行为,从而达到系统防护的目的。实验结果表明,这种方法不但能够防护各种已知的恶意代码,对新出现的恶意代码也能有效防护。它同时也是一种实时的恶意代码防护方法。

关键词: 恶意代码, LSM, 沙盒技术, 反病毒, 可信数据认证

Abstract: This paper introduces and implements an approach to attack malicious codes. This approach gets its goal by limiting the ability toexecute and modify data of codes from untrust networks and disks. This approach not only attacks known malicious codes, but also attacks unknownmalicious codes, moreover, it provides timely protection.

中图分类号: 

• TP309