Host Intrusion Prevention System Research

The Windows OS only considered powerful function and friendly user interface, but not thought over their security, at the early design. With the internet quick growth, the Virus and Trojan horse causes more and more heavy loss or damage. On the one hand, as the technique development, more and more Windows vulnerability was found with time, and the Vista has no exception. On the other hand, Rising, Kingsoft and other company annual report shows: the number of virus in year 2007 is equal to the total number in history. As this urgy situation, we have to take steps to protect the host.The security of host mainly comes through its intrusion prevention system, vulnerability scanning, malicious software scanning and killing, data encryption system .It mainly discusses the principles of each module and how it come ture.Combined with practice, this paper gives the design and implement, which includes overall framework, the details of subsystem, the interface and communication and the data struct.At last, give an outline of the new technique and research focus point on the host behavior monitor, suggest the new security research with Windows Vista and the new replacive system behavior monitor method in it, pose the new method "host behavior monitor based on statistical weight sum".