嵌入式操作系统的内核安全研究与设计  

Research and design on kernel security of embedded operating system

作　　者：韩立毛[1] 赵跃华[2] 马祥顺[2] 

机构地区：[1]盐城工学院信息工程学院,江苏盐城224051 [2]江苏大学计算机科学与通信学院,江苏镇江212013

出　　处：《计算机工程与设计》2010年第14期3233-3236,共4页Computer Engineering and Design

摘　　要：为了保证电力系统中嵌入式操作系统的内核安全性,根据安全内核的设计原则和内核调用的访问控制,提出了安全内核的设计方案。该方案考虑到应用安全访问控制对稳定性以及实时性的影响,结合电力系统的需求引入了决策缓冲机制。将安全内核设计划分为访问监视器、策略缓存、仲裁服务器,以及安全审计系统,构建了内核的安全访问控制,实现了内核安全的隔离性,确保系统内核的可信访问。该嵌入式操作系统安全内核的设计具有通用性、可移植性。To guarantee kernel security of the embedded operating system in the electrical power system,according to the design principle of security kernel and the access control of kernel calls,design plan of security kernel is proposed. This plan considered influence of the application safe access control to the stability as well as the timely,the union electrical power system＇s demand the policy-making cushion mechanism is introduced. The security kernel design is divided to visit the monitoring device,the strategy buffer,arbitrate the server,as well as the safe audit system,the kernel safe access control is constructed. The isolation of the kernel security is realized. The system kernel the credible visit is ensured. This embedded operating system security kernel＇s design is the versatility,the probability.

关 键 词：安全嵌入式 操作系统 内核安全 访问控制 策略缓存 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]