对操作系统内核动态扩展的研究  

RESEARCH ON OPERATING SYSTEM KERNEL DYNAMIC EXTENSION

作　　者：周应华[1] 熊安萍[1] 刘群[1] 

机构地区：[1]重庆邮电大学计算机科学与技术学院,重庆400065

出　　处：《计算机应用与软件》2009年第2期128-130,141,共4页Computer Applications and Software

摘　　要：操作系统内核动态扩展有利于核心空间的利用和系统性能,被现代操作系统普遍采用,但面临的关键问题是扩展模块对系统内核安全性、可靠性的影响。通过分析主流操作系统Linux、Windows、Mac OS X的内核模块按需加载机制及其安全、可靠性措施,指出这些操作系统都存在对内核模块安全控制的不足之处。从设计的角度对内核扩展机制的安全性和可靠性提出几点建议,并介绍了所进行的研发工作,有助于弥补内核扩展安全控制的缺陷。The operating system kernel dynamic extension is commonly adopted by modern operating system because it helps utilizing the kernel space efficiently and achieving better performance. But the problem is also introduced that the extension modules may impose threats on the security and reliability of the system kernel. By analyzing the kernel module loading on-demand mechanisms of the Linux, Windows, and Mac OS X systems and the their measures concerning the security and reliability of the kernel, it＇ s pointed out that these operating systems＇ kernel extension security system have drawbacks. Several suggestions concerning the security and reliability of the kernel extension mechanism are proposed. The undergoing research work to enhance the kernel extension security control is introduced at the end.

关 键 词：操作系统 动态扩展 内核模块 安全性 可靠性 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论] O346.1[自动化与计算机技术—计算机科学与技术]