Design And Implementation Of Detection System Of Hard Disk Firmware Virus

With the continuous development of the computer, as the core component in the computer,the hard disk's development speed is also very alarming. The current mainstream hard disk capacity is getting bigger and bigger, the storage's speed is higher and higher, but as a core device for storing data ,it's firmware security module development cannot meet the requirements of its security, what is worried.In February 2015, Kaspersky found the only virus which can modify the hard drive firmware all over the world so far, this new finding hard disk firmware virus has achieved breakthrough development, virus can modify the hard drive firmware code in order to damage the hard disk, data theft. In such an environment, it is necessary to study the principle and detection method of hard disk firmware virus.Based on the system of solid state hard disk, the article researches the hardware, main interface STAT2.0 protocol, the storage medium of hard disk, hard disk controller and the module of core function and so on in detail. At the same time, this paper presents a method to deal with the hard disk firmware virus detection. The scheme is divided into four basic modules:hard disk firmware information extraction module, firmware virus detection module, firmware virus removal module, defect list detection and repair module. The use of the hard disk firmware identification, integrity check and other technical means to detect the contents of the hard disk firmware whether be tampered with or damaged by the virus. Using a list of defects repair technology after cleaning up the hard disk firmware zone virus, repairing the list modified by the virus.The performance test of hardware detecting system indicates that in the part of cleaning up the firmware virus, common antivirus software cannot meet the requirements, but the firmware virus detection system designed in this paper can effectively detect and eliminate the virus, which has better adaptability for different types of coding. Compared with the mainstream killing virus software in the market, the testing indicated that this detect system has great superiority.