针对实时数据库中隐蔽通道问题采取的安全策略  

Security Policy for Covert Channel Problem of Real-Time Databases

作　　者：罗琼[1] 张立臣[1] 

机构地区：[1]广东工业大学计算机学院,广州510090

出　　处：《计算机科学》2005年第7期76-77,82,共3页Computer Science

基　　金：国家自然科学基金(No.60174050);广东省自然科学基金(No.010059);教育部骨干教师基金;广东省"千百十"工程人才培养基金;广东省高校自然科学研究项目(No.Z03024)基金

摘　　要：实时数据库的根本目标就是使满足截止时间的事务数为最大,因而,管理和支持优先考虑时间的事务处理是非常重要的。然而,随着实时计算的迅速发展,安全成了实时应用另一个必须考虑的问题。因此,在实时数据库系统中,提出一种结合实时性和安全性的方法是非常必要的。本文针对隐蔽通道讨论了安全问题。通过定义的CCF、DCCF变量对实时数据库中的并发控制算法进行扩展使其既满足时间限制条件又满足安全需求。陈述了消除隐蔽通道的非干预性原则,并对同时维持实时和安全需求的可行性进行了探讨。The decisive objective of real-time database is to maximize the number of the transactions that complete be- fore their deadlines, then management and transaction processing for real-time systems are essential in supporting time-critical applications. However, as real-time systems continue to evolve, security is another problem that must be considered in many real-time application. So security becomes another problem that must be considered. This paper discusses security problem according to covert channel, extends conurrency control algorithm in real-time database systems to satisfy both timing constraint and security constraint by defining CCF and DCCF variables. Demonstrating non-interference which can avoid covert channel and studying the feasibility of tdrieliness and security requirement maintained at the same time.

关 键 词：隐蔽通道 安全策略 实时数据库系统 并发控制算法 安全需求 截止时间 事务处理 实时计算 实时应用 安全问题 安全性 实时性 CCF 变量 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术] TP311.13[自动化与计算机技术—计算机科学与技术]