基于80386 保護(hù)模式的Win32 操作系統(tǒng)通過 ring0 特權(quán)級保護(hù)機制嚴(yán)格限制普通Win32 應(yīng)用程序以核心態(tài)運行。文章通過對這種保護(hù)機制的分析研究，給出了如何使普通Win32 應(yīng)用程序在核心態(tài)運行的思路，指出了Win32 操作系統(tǒng)中存在的這種安全隱患及其可能帶來的嚴(yán)重后果，最后給出了防護(hù)措施。
關(guān)鍵詞：Win32； ring0 ；安全 ；權(quán)限
Research on Security of Win32 Ring0 Privilege Protected Mechanism HUANG Hua-xing，SHU Hui，XIE Yu-qiang，LUO Jun-hong (Institute of Information Engineering，Information Engineering University, Zhengzhou 450002，China) Abstract: The Win32 OS that based on Intel 80386 protected mode restricts the common Win32 application to run in kernel mode strictly through ring0 privilege protected mechanism. This paper gives a way of how to make a common Win32 application to run in kernel mode, and then indicates the security vulnerability that existed in Win32 OS through the research of the protected mechanism and the terrible result it may brings. Finally, it shows the measure of how to guard.
Keyword: Win32; ring0; security; privilege