D3FEND 技术详情

D3-EAL

D3-EAL

Executable Allowlisting

定义

Using a digital signature to authenticate a file before opening.

父技术
子技术
关联构件
CreateProcess
Create Process

Executes a process.

ExecutableFile
Executable File

In computing, executable code or an executable file or executable program, sometimes simply an executable, causes a computer "to perform indicated tasks according to encoded instructions," as opposed to a data file that must be parsed by a program to be meaningful. These instructions are traditionally machine code instructions for a physical CPU. However, in a more general sense, a file containing instructions (such as bytecode) for a software interpreter may also be considered executable; even a scripting language source file may therefore be considered executable in this sense. The exact interpretation depends upon the use; while the term often refers only to machine code files, in the context of protection against computer viruses all files which cause potentially hazardous instruction

语义关系
出向blocksExecutable File
出向filtersCreate Process
出向kb referenceReference - Computing apparatus with automatic integrity reference generation and maintenance - Tripwire, Inc.
出向kb referenceReference - Enhancing Network Security By Preventing User-Initiated Malware Execution - MITRE