摘要
提出并设计了一个安全操作系统的信息安全模型。该模型消除了仅以用户作为主体存在的不安全隐患,除保密性指标外考虑了完整性指标,限制了隐蔽通道,限制了可信主体以满足最小权限原则,进行了域隔离,缩小了理论模型与实际应用的差距,并应用到自主开发的安全操作系统WXSSOS中。
This paper proposes a security model of secure operating system. The model absorbes the idea in Biba model and RBAC model, and modifies the BLP model to mitigate the security threat. It extends the category of subject in BLP, and considers the integrity aspect except for the confidentiality aspect. Also, covert channels and the trust subject are limited in this model. It is applied in WXSSOS, which is a self-developed secure operating system.
出处
《计算机工程》
EI
CAS
CSCD
北大核心
2005年第19期133-135,共3页
Computer Engineering
基金
浙江省自然科学基金资助项目(600014
M603228)