基于操作系统安全的恶意代码防御研究述评  

Comments on malicious code defending based on operating system security

作　　者：陈泽茂[1] 吴晓平[1] 沈昌祥[2] 

机构地区：[1]海军工程大学信息安全系,湖北武汉430033 [2]海军计算技术研究所,北京100841

出　　处：《计算机工程与设计》2008年第21期5407-5410,共4页Computer Engineering and Design

基　　金：国家自然科学基金项目(70471031)

摘　　要：总结了安全操作系统实现恶意代码防御的典型理论模型,分析了它们的基本思想、实现方法和不足之处,指出提高访问控制类模型的恶意代码全面防御能力和安全保证级别、从操作系统安全体系结构的高度构建宏病毒防御机制以及应用可信计算技术建立操作系统的恶意代码免疫机制将是该领域的研究方向。The state of the art research on malicious code defending in the area of secure operating system is summarized. The designs, implementations, and shortcomings of major security policies against malicious code are presented. Emerging trends of research in this area are outlined to be improving defending qualities and assurance level of access control type models, defending against macro viruses by enhancing the security architecture of secure operating system, and applying trusted computing technologies to build malicious code immune environment in secure operating system.

关 键 词：恶意代码防御 安全模型 安全策略 安全操作系统 可信计算 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]