摘要
SECOS是一个自主产权的安全操作系统,符合国家4级标准。该文总结了SECOS设计过程中的关键技术,包括:安全增强/改进设计方法,在Bell-La Padula强制访问模型基础上修改建立的理论模型及其实现,系统开发过程形式化设计,隐蔽信道分析方法及防范措施,客体重用等。安全系统性能估算测试表明SECOS的设计和实现是成功的。
SECOS is a secure operating system with independent intellectual property right, which accords with the requirements of level 4 secure operation system technology. This paper illustrates some key issues of the system, including design method for enchaneement of security, improved model from the Bell-La Padula MAC （mandatory access control） implementation, the realization of the model, formal method during the system development, conversiion channel analysis and its prevention, and secure deletion. The performance evaluation shows the design and implementation of SECOS is effective.
出处
《计算机工程》
EI
CAS
CSCD
北大核心
2006年第12期179-181,246,共4页
Computer Engineering
基金
国家中小企业创新基金资助项目
浙江省创新基金资助项目(04C26223300568)
