Research On Integrity Checking Methods Of The Host System Oriented To Attack Resistance Test

With the fast development of science and technology, the application of network is becoming popular. Going with it is the increasing threat to network security. And the host system Attack Resistant Test becomes an emergent work, and it gains more and more attention. The Attack Resistant Test of the host system is a process to test and evaluate the ability of host system maintaining its security under simulated attack conditions.But how to evaluate host's attack resist ability? We use the method of inspecting the attack effect on computer system's confidentiality, integrity and availability to evaluate the attack resistant ability. Most attack may influence host system integrity,so checking host system integrity is a important part of attack effect.The aim of host system integrity chedking oriented to ART is chedking the change of host system integrity under suffering stimulant attack. The main works and creations are as the following:1. This paper analyses and researches the technique of integrity checking.Aiming at the characteristic of ART, it puts forward measuring integrity from system.Then it defines for the integrity of the host system oriented to ATR and each checking item's integrity.It also analyses the characteristic of the integrity checking methods of ART and builds a model of the integrity checking of the host system oriented to ATR.2. This paper puts forwards the checking method of host system register integrity oriented to ART.This method connects monitoring with analyzing.It adopts hooking technology to actualize the register.Also it adopts the fist order searching arithmetic to read the register and also adopts BM arithmetic and Hash arithmetic to matching the keys.The experiment shows that this method is viable and applied.3. This paper puts forward the checking method of host system process integrity oriented to ART.This method bases on Windows Native API and rough set theory.It researches the technology of spying Windows Native API by using IAT.The experiment shows that this method is the same with checking the process integrity.4. This paper defines for the integrity damage degree of the host system oriented to ATR and each checking item.According to the characteristic of integrity checking data,it adopts Fuzzy Synthetical Evaluate to account the damage degree of integrity.And it gives demonstrations.