【摘要】：在當(dāng)今時(shí)代,物聯(lián)網(wǎng)系統(tǒng)開(kāi)始普及,進(jìn)入人們的日常生活。人們?cè)谙硎芪锫?lián)網(wǎng)服務(wù)帶來(lái)的便利的同時(shí),也因?yàn)槲锫?lián)網(wǎng)系統(tǒng)的安全問(wèn)題承受著極大的風(fēng)險(xiǎn)。傳統(tǒng)的物聯(lián)網(wǎng)系統(tǒng)本地安全保障方案的檢測(cè)系統(tǒng)與需要被保護(hù)的物聯(lián)網(wǎng)系統(tǒng)處于同一個(gè)操作系統(tǒng)中。當(dāng)操作系統(tǒng)遭到一系列的惡意軟件如Rootkit等篡改系統(tǒng)內(nèi)核方式的攻擊時(shí),該檢測(cè)系統(tǒng)會(huì)發(fā)生損壞或癱瘓。而且,由于傳統(tǒng)檢測(cè)系統(tǒng)處于的操作系統(tǒng)的不安全性,一些潛伏在該操作系統(tǒng)內(nèi)部的惡意軟件可以輕易地對(duì)其檢測(cè)數(shù)據(jù)進(jìn)行篡改,導(dǎo)致檢測(cè)結(jié)果失去相應(yīng)的可信性。本文在分析傳統(tǒng)物聯(lián)網(wǎng)本地安全保障技術(shù)缺陷的基礎(chǔ)上,提出了將物聯(lián)網(wǎng)服務(wù)檢測(cè)系統(tǒng)部署在相對(duì)隔離的虛擬化環(huán)境中,并通過(guò)虛擬機(jī)自省技術(shù)和內(nèi)存檢測(cè)技術(shù)進(jìn)行本地安全保障的新思路。進(jìn)而提出了一種基于虛擬化技術(shù)的物聯(lián)網(wǎng)系統(tǒng)內(nèi)存分析與安全保障方案。該方案通過(guò)虛擬化技術(shù)實(shí)現(xiàn)了保障系統(tǒng)與被保障系統(tǒng)的安全隔離,同時(shí)通過(guò)內(nèi)存取證技術(shù)實(shí)現(xiàn)了檢測(cè)數(shù)據(jù)的可信,與此同時(shí)通過(guò)虛擬機(jī)監(jiān)控器實(shí)現(xiàn)了多種機(jī)制的物聯(lián)網(wǎng)系統(tǒng)恢復(fù)策略,為物聯(lián)網(wǎng)系統(tǒng)的本地安全提供了一個(gè)完善的安全保障方案。最后通過(guò)大量實(shí)際環(huán)境下的測(cè)試,該方案被證實(shí)可行。
[Abstract]:In today's era, the Internet of things system began to popularize, into the daily life of people. People enjoy the convenience of the Internet of things service, but also because of the security of the Internet of things system bear a great deal of risk. The detection system of the local security scheme of the traditional IOT system is in the same operating system as the IOT system which needs to be protected. When the operating system is attacked by a series of malware such as Rootkit tampering with the kernel, the detection system will be damaged or paralyzed. Moreover, because of the insecurity of the operating system in which the traditional detection system is located, some malware lurking inside the operating system can easily tamper with its detection data, resulting in the loss of the corresponding credibility of the detection results. Based on the analysis of the shortcomings of the traditional local security technology of the Internet of things, this paper proposes to deploy the IoT service detection system in a relatively isolated virtualization environment. And through the virtual machine introspection technology and the memory detection technology to carry on the local security safeguard new idea. Furthermore, a virtualization based memory analysis and security scheme for Internet of things systems is proposed. The scheme realizes the security isolation between the guarantee system and the guaranteed system through virtualization technology, and realizes the credibility of the detection data through the memory forensics technology. At the same time, the recovery strategy of the Internet of things system with various mechanisms is implemented through the virtual machine monitor, which provides a perfect security scheme for the local security of the Internet of things system. Finally, the scheme is proved to be feasible through a large number of tests in the actual environment.
【學(xué)位授予單位】：北京郵電大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2016
【分類(lèi)號(hào)】：TP391.44;TN915.08

【相似文獻(xiàn)】

相關(guān)期刊論文 前10條

1 吳雪霽;;把握“物聯(lián)網(wǎng)”時(shí)代的三個(gè)關(guān)鍵點(diǎn)[J];通信世界;2009年33期

2 秦茜;;物聯(lián)網(wǎng)驟成產(chǎn)業(yè)巨浪 各方大肆追捧恐為時(shí)尚早[J];IT時(shí)代周刊;2009年Z2期

3 石菲;;物聯(lián)網(wǎng)還有多遠(yuǎn)[J];中國(guó)計(jì)算機(jī)用戶(hù);2009年Z2期

4 馬繼華;韓文哲;;物聯(lián)網(wǎng)的未來(lái)會(huì)變成“空中樓閣”嗎?[J];信息網(wǎng)絡(luò);2009年10期

5 ;物聯(lián)網(wǎng)系列報(bào)道之一 理性物聯(lián)網(wǎng)[J];通信世界;2009年40期

6 李鵬;;物聯(lián)網(wǎng)發(fā)展 標(biāo)準(zhǔn)與應(yīng)用先行[J];通信世界;2009年40期

7 李鵬;趙經(jīng)緯;;北郵謝東亮 物聯(lián)網(wǎng)需兩顆紅心一種準(zhǔn)備[J];通信世界;2009年40期

8 周雙陽(yáng);;尋找物聯(lián)網(wǎng)的制高點(diǎn)[J];通信世界;2009年41期

9 張鵬;;物聯(lián)網(wǎng),十年涅i，

本文編號(hào)：2160075