摘要
通用Linux平台需要多种强制性访问控制(MAC)机制并存,现有并存技术存在灵活度不高、平台迁移性差和系统开销增幅大的问题。为此,提出一个多种MAC机制并存的动态装载方法。通过构建跳跃表实现多种M AC机制的并行装载,利用优先级调度算法对装载后的M AC机制实施灵活调度。测试结果表明,相比于通用堆叠并存技术,该方法具有可行性和低耗性,并且装载后的模块具备安全防篡改功能。
General Linux platform requires multiple Mandatory Access Control(MAC)mechanisms,the existing coexistence technology has the problems of low flexibility,poor mobility of platform and large increase of system overhead.Therefore,a dynamic loading method of multiple coexisting MAC mechanisms is proposed.The parallel loading of multiple MAC mechanisms is realized by constructing the SkipList,and the MAC mechanism after loading is flexibly scheduled by the priority scheduling algorithm.Test results show that,compared with the common stacking coexistence technology,this method is feasible and low-cost,and the module after loading has the function of security and tamper-proof.
作者
杜军龙
周剑涛
DU Junlong;ZHOU Jiantao(Jiangxi Information Center,Nanchang 330001,China)
出处
《计算机工程》
CAS
CSCD
北大核心
2018年第11期62-66,共5页
Computer Engineering
基金
"核高基"重大专项"工业互联网安全操作系统产业化及规模化应用"(2017ZX01038103)
关键词
强制性访问控制
动态装载
跳跃表
优先级调度
防篡改
Mandatory Access Control(MAC)
dynamic loading
SkipList
priority scheduling
tamper-proof
