系统可信性验证方法研究  

Research on Trust Verification for Computer System

作　　者：任江春[1] 马俊[1] 伍江江[1] 程勇[1] 王志英[1] 

机构地区：[1]国防科技大学计算机学院,湖南长沙410073

出　　处：《信息安全与技术》2010年第6期33-38,共6页

摘　　要：随着病毒、木马等危害的日益严峻,可信逐渐成为计算机系统安全的重要标志。由于可信的定义不统一,可信的内涵和相关理论研究还比较落后。文章从可信概念的追溯入手,总结可信的基本属性,提出了计算机系统可信性验证的一般方法,并从身份、行为、内容和环境四个方面进行了详细说明。在此基础上,结合可信验证的分类给出了相关引理和证明。最后应用可信验证方法提出了一种对系统安全进行增强实施的可信赖引用监控器模型。For more and more virus and Trojan cracked on the computer system, trust has played a important act on the system security. However, trust has many different definitions. The true meaning and theory of trust have not been researched in deep. This paper firstly discusses the conception of trust, concludes some Properties of it; Secondly proposes a new kind of trust verification method from four sides： identification, action, context and environment. At the same time, it gives some useful results. In the end, it suggests a new trusted reference monitor model based on trust verification. It is valuable to enhance security of computer system.

关 键 词：系统安全 可信 可信验证 可信赖引用监控器 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]