基于改进军用安全模型的sJava语言  

sJava language based on improved military security model

作　　者：于泠[1,2] 陈波[2] 肖军模[1] 

机构地区：[1]解放军理工大学通信工程学院,江苏南京210007 [2]南京师范大学计算机系,江苏南京210097

出　　处：《解放军理工大学学报（自然科学版）》2009年第1期23-29,共7页Journal of PLA University of Science and Technology(Natural Science Edition)

基　　金：江苏省自然科学基金重点资助项目(BK2004015);江苏省普通高校自然科学研究计划资助项目(08KJD520017)

摘　　要：为了发现、控制软件中的非法信息流,利用改进后的军用安全模型对Java语言的安全性进行扩展,提出了一种基于类型的信息流控制方法。将安全级别编码为程序中的类型,并利用定型规则发现非法的信息流,扩展后的语言称为sJava。给出了sJava类型安全性的证明,实现了对开源的Java编译器Jikes的安全性改造。结果表明,sJava语言源程序能直接编译成字节码,不增加系统的运行负载。In order to discover and control the illegal information flow in programs,the safety of Java was augmented with improved military security model(IMSM) and a type-based information control method was proposed.Security levels were coded as types in source program,and the illegal information flow was caught by typing rules.The security of the augmented Java language called sJava was proved.Jikes,a kind of open source Java compiler was reconstructed.Results show that the sJava programs can be compiled directly ...

关 键 词：信息流控制 军用安全模型 JAVA 类型系统 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]