Study Of Safeguard System Of Linux Server Integrality In Company Network

Integrality of server in company was one of the important contents of secure safeguard in company information system. People had begun to regard the study of this way in recent years, and had presented some of practical design and product of software. Practical application indicated that the design and the software product had shown different degree, of some vulnerability and shortage, the effect of safeguard was no ideal.Problems of Linux server's safeguard of integrality in company network were study in this paper. On the base of deep analyzing on relevant design as well as software function and capabilities, some new design ideas and realizing methods of research were provided. Main technique feature were as followed:(1) In main program of safeguard system, three steps with selective checking to files and keeping integrality of the system itself were designed. The main program was made to run as Daemon process.(2) Starting of the main program was controlled by using memory-resident program which could prevent inbreaker from stopping its process and deleting main program files:(3) High efficiency of hard disk and security of outside saving equipment such as outside hard disk and CD driver were combined with each other:(1) The safeguard system would use the standard data reference in hard disk to verify files rapidly in the case of no inbreaker.(2) Renewing work file with it's mirroring in hard disk and renewing its standard data reference rapidly if the encrypted mirroring in hard disk was not demolished.(3) If encrypted mirroring of a file had been demolished at all, the system would renew the file from outside read-only equipment, and would renewed its standard reference data at once.(4) Designing a special and accessorial program of file copy for safeguard system, so that using it to make an encrypted mirroring of work files and renewing their feature value and property value in time.This study had realized keeping the surveillance and the renewing of server system files automatically; on the other hand, it could surveille of operating system kernel and informed administrators whether the kernel had been compiled by inbreaker.