| 摘要 |
A security protection method and device, the method comprising: starting a real operating system (OS), creating a virtual OS in the real OS, and placing the virtual OS in an isolated running environment; starting a first process in the virtual OS, and starting a second process in the real OS; upon receiving an operation instruction from a user, redirecting the operation instruction to the first process; after the first process is run and the operation instruction is determined to be directed to the second process, transmitting the operation instruction to the second process; and after the second process is run and receives the operation instruction from the first process, determining whether the operation instruction is an executable command, and if so, then executing the operation instruction, and if not, then refusing to execute the operation instruction. Provided in an embodiment of the present invention is a security protection scheme having a centralized defense point and a wide application range. |
