通用软件封装器在Linux中强制访问控制的实现

REALIZATION OF MANDATORY ACCESS CONTROL IN LINUX BY GENERIC SOFTWARE WRAPPER

基于Linux系统设计并实现的通用软件封装器是一个可实现多种安全措施的通用平台,如访问控制、入侵检测等。重点阐述了利用通用软件封装器在Linux中实现强制访问控制的机制,并与SELinux进行了详细的比较。给出了实验结果并进行了分析,结果达到预期目的。

Generic Software Wrapper（GSW） is designed and realized in Linux kernel, on which many security policies, such as access control and intrusion detection, can be realized. Emphasis is focused on the realization mechanism of mandatory access control by using GSW, and detailed comparison to SELinux is presented. Experimental results are given and analyzed, which reach the anticipated purpose.