Nam Hoon Lee, Shin Geun Yoo, Young Chul Shim

The KIPS Transactions:PartC, Vol. 8, No. 6, pp. 741-756, Dec. 2001
10.3745/KIPSTC.2001.8.6.741,   PDF Download:

Abstract

With the development of computer systems, there has been a sharp increase in the threats on these systems including attacks by malicious programs such as virus, vandal, etc. Currently virus vaccines are widely used to thwart these threats, but they have many weaknesses. They cannot guard against unknown threats and sometimes, they also cannot detect the existence of malicious programs before these malicious programs make any destructive results. For lack of an efficient security model, the existing security programs have the problem that they raise many false-positive alarms in spite of normal action. So it becomes very important to develop the improved security program that can make up for the weakness of the existing computer security program and can detect many threats of malicious programs as early as possible. In this paper we describe the design of an improved security model and the implementation of a security program that can filter and handle the threats on computer systems at the kernel level in real time.

Statistics
Cite this article