Win32下ring0特權級保護機制安全性研究

基于80386 保護模式的Win32 操作系統通過 ring0 特權級保護機制嚴格限制普通Win32 應用程序以核心態(tài)運行。文章通過對這種保護機制的分析研究，給出了如何使普通Win32 應用程序在核心態(tài)運行的思路，指出了Win32 操作系統中存在的這種安全隱患及其可能帶來的嚴重后果，最后給出了防護措施。
關鍵詞：Win32； ring0 ；安全 ；權限
Research on Security of Win32 Ring0 Privilege Protected Mechanism HUANG Hua-xing，SHU Hui，XIE Yu-qiang，LUO Jun-hong (Institute of Information Engineering，Information Engineering University, Zhengzhou 450002，China) Abstract: The Win32 OS that based on Intel 80386 protected mode restricts the common Win32 application to run in kernel mode strictly through ring0 privilege protected mechanism. This paper gives a way of how to make a common Win32 application to run in kernel mode, and then indicates the security vulnerability that existed in Win32 OS through the research of the protected mechanism and the terrible result it may brings. Finally, it shows the measure of how to guard.
Keyword: Win32; ring0; security; privilege