| 摘要 |
A method for protecting a computing apparatus against manipulation, which computing apparatus includes a plurality of components, which are designed to execute software and which have associated access rights is provided. The method includes the following steps: withdrawing a number of the access rights to the components during a starting process of the computing apparatus and specifying a subset of the access rights to the components on the basis of the withdrawn access rights, which subset cannot be changed during the execution of the software. By withdrawing access rights, the integrity protection is improved for the computing apparatus, because, in the event of a successful attack, the manipulations that can be performed by the manipulated software are limited. The disclosed further relates to a computer program product and to a device for protecting a computing apparatus against manipulation. |
