Research on Defence Method of Blackmail Virus Based on Trusted Computing

Relying on traditional defence methods, the information system is easily to be attacked by blackmail viruses. A blackmail virus defence method and system based on trusted computing is proposed in the paper. The customized trusted architecture of important network assets is formed by facing specific application scenarios and security requirements. Access control policy is established by trusted defence system, and the white list is based on according to trusted access list. The common area, key areas and other logical networks are isolated to avoid the spread of unsafe factors. The security strategy can be implemented more effectively by reasonably dividing the network area. The trusted defence system will immediately intercept the untrusted IP captured and prevent it from accessing the real host. The trusted defence system will not intercept the untrusted IP to continue to visit the honeypot, and continue to let the untrusted IP to visit the honeypot. It can quickly detect the behaviour of blackmail virus and other malicious programs, and effectively and timely curb them, or control the risk of blackmail virus and other malicious programs in a micro isolation area.