安全工具包的设计及安全性分析

Architecture design of security toolkit and analysis of security

信息安全工具包是用于开发信息安全应用产品的工具。目前我国使用的工具包都是国外产品,安全可靠度不高,很难保证使用它们开发的安全产品的安全性。对一个国产信息安全工具包(CIST)的结构设计进行了研究。在CIST中,内部信息安全性是其主要需求。CIST有一个安全内核,该内核使用了多种安全策略。CIST的安全性进行评估表明它能够适用于安全强度要求高的场合。

Information security toolkit is used to make information security product. At present, the security toolkits are not made in our country, so the security of the product based on the security toolkit might not be ensured. Architecture design of a Chinese information security toolkit （CIST） is described. The CIST has a security kernel. And multi-security policies are used in the kernel. Security evaluation shows that the CIST could be used in situation needed high security.