一种基于DOM盘的安全Linux系统的设计与实现  

Design and Implementation of A Secure Linux Operating System Based on DOM

作　　者：王丹丹[1] 刘晓洁[1] 李涛[1] 浦海挺[1] 刘莎[1] 

机构地区：[1]四川大学计算机系,成都610065

出　　处：《计算机工程》2005年第22期143-145,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(60373110);教育部博士点基金资助项目(20030610003)

摘　　要：提出并实现了一种基于Linux的安全操作系统模型——NisecLinux。该系统以DOM(DiskonModule)盘为存储介质,实现了基于网络访问的强制访问控制机制。通过防火墙和入侵检测系统的联动大大增强了系统的安全防护能力;通过VPN技术使数据传输的安全性得到了保障;精简了内核和文件系统,使系统本身的性能得到改善;使用DOM盘加强其物理安全性。该系统在安全性方面达到了系统审计级的标准。A secure operating system model named NisecLinux is presented. NisecLinux is implemented on DOM disk and has the mandatory access control mechanism based on network access. Its ability of security is greatly enhanced by an intrusion detection system related with a firewall; the security of data transfer is ensured via the technology of virtual private network; the performance of the NisecLinux is improved by condensing the kernel and file system; the physics security is strengthened by using DOM disk. NisecLinux has reached the level of system audit standard in security.

关 键 词：安全操作系统 访问控制 防火墙 入侵检测系统 VPN 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]