基于强制访问控制的安全Linux系统设计与实现  

Design and Implementation of Secure Linux System Based on Mandatory Access Control

作　　者：潘龙平[1] 庄毅[1] 吴学成[1] 

机构地区：[1]南京航空航天大学信息科学与技术学院,南京210016

出　　处：《计算机工程与应用》2006年第5期142-145,共4页Computer Engineering and Applications

基　　金：国家部委预研基金资助项目

摘　　要：论文首先研究强制访问控制模型,分析了基于信息保密性的Bell-Lapadula模型与基于信息完整性的Biba模型。在此基础上提出了安全增强型Linux系统的体系结构,详细描述了安全系统的各功能组件及关键技术。安全系统对Linux系统资源实施强制访问控制,保护资源的机密性、完整性,系统具有入侵追踪功能,能够很好地抵御本地与网络入侵。First this paper makes research on the models of Mandatory Access Control（MAC）,especially the Bell-Lapadula model based on information confidentiality and the Biba model based on information integrity.In this paper we propose a secure Linux system architecture applied with mandatory access control,and give a description of all the components in detail and some key technologies for the implement of the system.The secure system implement the mandatory access control policy ,and protect the confidentiality and integrity of the resources in linux.The secure system can trace back to the information of the attacker,and resist the attacks from local or remote.

关 键 词：强制访问控制 安全模型 系统调用 可加载内核模块 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]