基于实时系统完整性控制机制构建Attack-Tolerant系统  

Implementation of Attack-Tolerant System Based on on-the-Fly System Integrity Control Mechanism

作　　者：李斐[1] 王申康[1] 

机构地区：[1]浙江大学计算机科学与技术学院,浙江杭州310027

出　　处：《江南大学学报（自然科学版）》2006年第5期526-530,共5页Joural of Jiangnan University (Natural Science Edition)　

摘　　要：目前计算机安全领域的研究主要集中在入侵防御等方面,无法保证系统在受到攻击的状态下继续提供有效服务.提出了一种新的系统完整性控制机制,以及如何基于该机制构建Attack-Tolerant系统.实时系统完整性控制机制能够实时检测系统非正常改动并自动恢复,确保系统服务在受到攻击的状态下运作正常,保证了系统的机密性、有效性与完整性.Nowdays, security researches focus on intrusion-tolerant systems which are not conceived to be invulnerable, but rather to be able to withstand the impact of an attack and continue providing critical services despite ongoing attacks. A new system integrity control mechanism and how to implement attack-tolerant system based on it are presented in the paper. On-the-fly system integrity control mechanism detects unauthorized modifications and restores the system automatically as quickly as possible, ensures that system can continue providing critical services despite ongoing attacks, and keeps the integrity, availability and confidentiality of system successfully.

关 键 词：系统完整性 攻击可容 LINUX内核模块 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论] TP316.89[自动化与计算机技术—计算机科学与技术]