功能相对固定的专用主机在国家关键基础设施等领域的信息系统中发挥着重要作用,因此成为APT(Advanced Persistent Threat)、特种木马、零日攻击等新型攻击的主要目标。常见的主机防御手段难以肩负起防护重任。本文提出一种具有自学习和自愈能力的主机“白环境”构建方法,适用于各类专用场合,确保主机全生命周期的运行安全。 Dedicated hosts with relatively fixed functions play an important role in information systems in areas such as national critical infrastructure and are therefore the main targets of new attacks such as Advanced Persistent Threat (APT), Special Trojan horses and zero-day attacks. Common host defense is difficult to shoulder the responsibility of protection. This paper presents a host with self-learning and self-healing capabilities “white environment ” building method, suitable for all kinds of special occasions, to ensure the safety of the host full life cycle.