Title:
SECURITY CONTROL METHOD AND COMPUTER SYSTEM
Document Type and Number:
WIPO Patent Application WO/2019/072158
Kind Code:
A1
Abstract:
Provided are a security control method and a computer system. A first domain and a second domain are deployed on the computer system, the security of the second domain is higher than that of the first domain, a program is deployed in the first domain, and a control flow management module and an auditing module are deployed in the second domain. The security of the second domain is higher than that of the first domain. The control flow management module acquires control flow information by means of a tracker during the execution of a program located in the first domain; the auditing module performs, according to auditing rules, auditing on information to be audited, determines that the auditing is passed when the information, to be audited, matches the auditing rules, and then allows the first domain to execute a subsequent operation, such as accessing a security program of the second domain. Data flows of the program may also be audited while the control flow information is audited. The method can prevent the execution of some key programs from being ignored, improving the security of the computer system.
Inventors:
CHEN HAIBO (CN)
WANG NAN (CN)
CHEN SHANXI (CN)
XIE MIAO (CN)
WANG NAN (CN)
CHEN SHANXI (CN)
XIE MIAO (CN)
Application Number:
PCT/CN2018/109416
Publication Date:
April 18, 2019
Filing Date:
October 09, 2018
Export Citation:
Assignee:
HUAWEI TECH CO LTD (CN)
International Classes:
G06F21/74
Foreign References:
| CN106921799A | 2017-07-04 | |||
| CN104794395A | 2015-07-22 | |||
| CN104318182A | 2015-01-28 | |||
| US20080288789A1 | 2008-11-20 |
Other References:
See also references of EP 3674954A4
Download PDF: