构件化动态可扩展操作系统的内核安全模型  

Kernel-level security model of component-based and dynamically extensible operating systems

作　　者：杨振宇[1] 王维汉[1] 陈志成[1] 杨维康[1] 

机构地区：[1]清华大学信息技术研究院操作系统与中间件技术研究中心,北京100084

出　　处：《计算机工程与设计》2006年第10期1711-1714,1748,共5页Computer Engineering and Design

基　　金：国家863高技术研究发展计划基金项目(2001AA113400)

摘　　要：灵活内核技术把构件技术充分地融入到了操作系统体系结构的设计中,在兼顾了性能和灵活性的同时也引入了安全问题。对灵活内核带来的安全问题进行了分析,讨论了几种现有的解决内核安全问题的技术,综合几种现有技术设计了一种基于页表机制和构件技术的内核安全模型,介绍了其在Intelx86处理器上的原型实现要点,最后对该模型进行了分析,说明其解决了所提出的安全问题。The agile kernel technique uses component-based programming model in implementing operating systems, and provides a natural model of operating system architecture. It arrives at a trade-offbetween performance and flexibility, but it also make kernel insecure. The main security problems arisen from agile kernel are analysed. Several kinds of technique to implement kernel security are discussed. Then a model that integrates them is designed. This model is based on page table and component technique. In the end, the key points of an implementation in Intel x86-architecture are introduced.

关 键 词：操作系统 构件技术 动态扩展 灵活内核 安全 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]