基于多样性的Linux安全性研究

The Research of Linux Security Based on Diversity

该文在分析了同构系统的安全缺陷后,借鉴生物多样性原理,阐述了计算机系统多样性对系统安全性的重要作用。论文指出软件有三个层次的多样性,即源代码级多样性、行代码级多样性和运行中的多样性,并着重讨论了操作系统运行时多样性的实现方法。最后,提出了一种基于多样性的Linux安全解决框架。

This paper analyses the security detects of homogeneous systems ,and expounds the important relationship between diversity and system security.Drawing lessons from the theory of diversity in biological systems ,the paper summarizes three types of diversity in software,and focuses primarily on the methods of introducing diversity to operating systems when it is executed.At the end,the paper puts forward a new framework of Linux security based on diversity.