Research Of Operating System Virus Defense Strategy

Accompanying with the rapid development of computing technology and networktechnology computer virus has also spreading rapidly on the computer and network whichbrings tremendous threat to the computer and network security. Since the operating systemsecurity vulnerabilities are the main way of virus spreading it can be effectively curbing thespread of the virus to reduce and repair the operating system vulnerabilities. To find themethod for reducing and repairing the operating system vulnerabilities and build operatingsystem virus defense strategy is of great significance for curbing the spread and invasion ofthevirusandenhancingthesecurityofcomputer system.An operating system virus defense strategy has been put forward by the thesis based onthe research of reducing and fixing the security vulnerabilities of operating system. Systemlayeroperatingsystem virusdefensestrategyis onepart oftheoperatingsystemvirusdefensestrategy which is composed of the development circuit of operating system, the designprinciple of operating system oriented virus defense, the formal development method, thesource code check and vulnerabilities scan. The development circuit of operating system, thedesign principle of operating system oriented virus defense and the formal developmentmethod provide general guidance for the development and design of operating system whichthe source code check and vulnerabilities scan apply in the period of code edit and test ofoperating system. Application layer operating system virus defense strategy is another part ofthe operating system virus defense strategy which enhances the virus defense ability of theoperating system by incorporating patch management, virus check and clear and firewall intheoperatingsystem.A patch management system has been designed and realized by the thesis. The patchmanagement system is designed in client/server structure and modularization idea which theserver is composed of the patch information librarymaintenance module and patch downloadmodule. The patch information library maintenance module is designed for maintaining theserver patch information library which is stored by an xml file. The client just needs to getxml file from server and then possess all the patch information, which highly reduces thecoupling of the server and the client. The server does not need to collect any information oftheclient,whichhasprotectedtheprivacyofusers.