安胜安全操作系统的隐蔽通道分析  

Covet Channel Analysis on ANSHENG Secure Operating System

作　　者：卿斯汉[1,2,3] 朱继锋[1,2,3] 

机构地区：[1]中国科学院信息安全技术工程研究中心 [2]中国科学院软件研究所,北京100080 [3]中国科学院研究生院,北京100039

出　　处：《软件学报》2004年第9期1385-1392,共8页Journal of Software

基　　金：国家自然科学基金;国家重点基础研究发展规划(973)~~

摘　　要：安胜安全操作系统是自主研制的基于 Linux 的高安全等级安全操作系统,包括安全内核,安全架构与安全模型.总结了对该系统进行的隐蔽通道分析方法,首次报道基于 Linux 内核开发的安全操作系统的隐蔽通道分析结果.应用新型的“回溯方法”发现了某些新的隐蔽通道.对被标识的隐蔽通道,准确地计算了它们的带宽,并进行了适当的隐蔽通道处理.ANSHENG operating system is a secure operating system with high security level based on Linux, which is independently developed with the security kernel, security framework and security models. In this paper, the approaches to analyzing covert channels in the underlying system are summarized, and it is the first time that the covert-channel-analysis results on a secure operating system based on Linux kernel have ever been reported. Some new covert channels have been found by the novel backward tracking approach. For the identified covert channels, accurate bandwidth computation and appropriate covert-channel handling have been performed.

关 键 词：安胜安全操作系统 隐蔽通道分析 回溯方法 存储通道 信息流 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]