安全关键操作系统的功能隔离机制的研究  

The Function Isolation Mechanism in Safety Critical Operating System

作　　者：唐玲[1] 

机构地区：[1]华东政法大学信息科学与技术系,上海201620

出　　处：《中国电子商情（通信市场）》2009年第6期210-216,共7页

摘　　要：本文在分析现有操作系统安全机制的基础上，针对现有安全机制的不足，提出了功能隔离的新思想。该机制可提供更细致的隔离粒度，并可使不同类别的功能请求在相互隔离的执行域中执行，从而提高系统的可靠性与安全性。同时讨论了功能划分的方法，并提出功能隔离机制的具体实现技术-PFI。最后通过实验说明功能隔离机制不会显著影响系统效能。Considering the limitations mechanism adopting function isolation more delicate granularity of function of current security technique, a new security is proposed in this paper. With the mechanism can be used and different execution domains corresponding to different function requests may be isolated each other, so the safety of operating system can be improved. In the paper the principle and algorithm for function division are introduced in detail, and one isolating mechanisms called PFI is presented. Experiment results show that the overhead of function isolation wouldn＇t reduce the system efficiency notably.

关 键 词：安全关键操作系统 空间隔离 功能隔离 功能划分 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论] TP302.8[自动化与计算机技术—计算机科学与技术]