摘要
在很多安全操作系统中都存在一些安全关键进程或可信进程 ,一旦它们被黑客入侵则会破坏整个系统的安全性 .本文的多保护域进程模型在进程内部通过细粒度的内核级保护域隔离机制对进程数据和代码实施访问控制 ,从而防止黑客利用程序局部漏洞劫持整个进程 ,以达到增强安全关键进程自身安全的目的 .本文为该模型提供了两种设计方案并对其中一种设计做了原型实现 .
Many secure operating systems have some privileged processes or trusted processes which are always at risk of being hijacked by various attacks such as the buffer overflow attack.Once they are hijacked,the security of the whole system would be damaged.In this paper,a multi-protection domains process model is described which provides fine-grained kernel level protection for codes and data within process address space.The fine-grained internal protection of process can effectively prevent attackers from hijacking the whole process by damaging the process's data or codes.This paper offers two designs for this model and a prototype implementation of one of them.
出处
《电子学报》
EI
CAS
CSCD
北大核心
2005年第1期38-42,共5页
Acta Electronica Sinica
基金
江苏省自然科学基金 (No .BK2 0 0 2 0 73)
关键词
保护域
访问控制
计算机安全
操作系统
protection domain
access control
computer security
operating system
