Analysis Of Storage Structure On Linux Operating System

It mainly analyzes the storage structure of 64-bit Linux,and the analysis tool has been implemented in programming.It studies the contents of the four aspects.They are access to chain tables of processes,access to stored data,and conversion of virtual address to the physical address,allocation and recovery of internal memory.Firstly,this paper introduces memory access scheme,which is the implemented CDriverLoad interface controlled,to enable the driver to read different data,and the driver design and implementation of each function,to acquire completely physical memory data.Secondly,in terms of access to process chain tables,this paper gives a localization scheme of head node,and analyzes the structure of the process list,starting from memory data,to verify the list of processes as a two-way circular list;Then,this paper elaborated the conversion process of virtual address to the physical address,and gives specific examples,which is obtained result analysis of each level mapping,from starting virtual address,converting into physical address by four-level mappings.Lastly,this paper studies the principle of the buddy algorithm,and analyzes conditions of becoming buddy,to verify the list of free_list as a two-way circular list.The research content of this paper has been verified for many times,and the analysis tool has been implemented in programming achieve the purpose of rapid analysis through interactive method.This paper provides the theoretical basis and the specific interface for the design of Linux memory digital forensics software.