基于LSM的进程行为监控技术研究

Research of the Process Behavior Monitoring Technology Based on LSM

LSM是一款支持多种安全策略的、为Linux内核开发的轻量级通用访问控制框架,这种访问控制框架能使各类访问控制模型作为动态内核模块执行。本文简要介绍了LSM的相关背景和设计思想,讨论了LSM的具体实例,并介绍了我们的设计方案。

LSM（Linux Security Modules）is a universal lightweight access control framework supporting multiple security strategies for Linux kernel development,and this framework can make every access control module server act as a dynamic kernel module. In this paper, the related background and the design conception of LSM are briefly introduced, a detailed case of LSM is discussed,and our design scheme is presented.