对操作系统内核动态扩展的研究

RESEARCH ON OPERATING SYSTEM KERNEL DYNAMIC EXTENSION

操作系统内核动态扩展有利于核心空间的利用和系统性能,被现代操作系统普遍采用,但面临的关键问题是扩展模块对系统内核安全性、可靠性的影响。通过分析主流操作系统Linux、Windows、Mac OS X的内核模块按需加载机制及其安全、可靠性措施,指出这些操作系统都存在对内核模块安全控制的不足之处。从设计的角度对内核扩展机制的安全性和可靠性提出几点建议,并介绍了所进行的研发工作,有助于弥补内核扩展安全控制的缺陷。

The operating system kernel dynamic extension is commonly adopted by modern operating system because it helps utilizing the kernel space efficiently and achieving better performance. But the problem is also introduced that the extension modules may impose threats on the security and reliability of the system kernel. By analyzing the kernel module loading on-demand mechanisms of the Linux, Windows, and Mac OS X systems and the their measures concerning the security and reliability of the kernel, it＇ s pointed out that these operating systems＇ kernel extension security system have drawbacks. Several suggestions concerning the security and reliability of the kernel extension mechanism are proposed. The undergoing research work to enhance the kernel extension security control is introduced at the end.