Patent ID: 8533829

Claim:
A method for monitoring a managed device, wherein a management center pre-saves an integrity list containing system integrity values of the managed device and the correspondence between the managed device and its own system integrity values, and the managed device acquires and saves its own current system integrity value upon its startup, said method comprises the steps of: a) sending, by the managed device, information containing the current system integrity value to the management center after the reception of a monitoring command from the management center; and b) determining, by the management center, whether the current system integrity value of the managed device in received information coincides with a pre-saved system integrity value of the managed device in the management center based on the received information and said integrity list, and determining that an unknown attack on the managed device exists and performing alert processing if they do not coincide with each other, wherein said managed device is a computer, and the step of said managed device acquiring and saving its own current system integrity value upon its startup comprises the steps of: i) calculating integrity values for parameter information which has been configured, master boot sector and system boot partition and storing them in a secure storage component after starting BIOS (Basic Input Output System) or EFI (Extensible Firmware Interface), wherein said parameter information includes: enable or disable status configuration of various system functions, various authentication passwords, disk configuration parameters, central processing unit microcode software, peripheral configuration parameters and configuration parameters of a security function; and ii) using the integrity values mentioned in the step i) as the current system integrity value.