基于管道的TCB扩展模型

Channel-Based TCB Extension Model

为解决当前系统环境中应用安全与系统安全互相独立而存在的问题,提出了安全管道和TCB扩展的概念,给出了安全管道的形式化描述,并抽象出一种基于安全管道的TCB扩展模型,说明如何利用TCB扩展构建安全机制间的信息交互机制,以实现不同安全机制之间的统一.通过对TCB扩展模型的安全性分析,进一步说明了模型的科学性和现实可行性.

To solve the problems derived from isolation of application security mechanism and operation system security mechanism, firstly, the concept of security channel and TCB extension was proposed, and then formal description of security channel was given. By practices, a TCB extension model which based on security channel was obtained. This model could be used to explain how to build security channel between different security mechanisms in order to achieve uniform and eliminate conflicts of those security mechanisms. Finally the theory and practicality of this model with security analysis and engineering implementation were proven.