KFUR:一个新型内核扩展安全模型  

KFUR: A New Kernel Extension Security Model

作　　者：马超[1] 尹杰[1] 刘虎球[1] 李浩[2] 

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]西安电子科技大学计算机科学与技术学院,西安710126

出　　处：《计算机学报》2012年第10期2091-2100,共10页Chinese Journal of Computers

基　　金：国家"八六三"高技术研究发展计划重大项目"以支撑公众与企业服务为主的网络操作系统研制"(2011AA01A203))资助~~

摘　　要：保障内核扩展的安全性对操作系统具有重要意义.当前存在大量针对内核函数使用规则的攻击,内核扩展中也存在大量违反内核函数使用规则的错误,因此针对内核函数使用规则的安全性检测十分必要.虽然存在多种提高内核扩展安全性的方法,但很少有方法对内核函数的使用规则进行安全性检测.文中设计了KFUR(KernelFunction Usage Rule)内核扩展安全模型系统,用于在运行时检测内核扩展调用内核函数是否遵守内核函数使用规则.如果内核扩展调用内核函数满足模型安全运行条件,则允许对该内核函数进行调用,否则将错误报告给操作系统内核并终止该内核扩展的运行.文中所述研究在Linux操作系统上对KFUR安全模型系统进行实现,并将其运用于e1000网卡驱动、SATA硬盘驱动和HDA声卡驱动内核扩展.安全性评测表明安全模型系统能够对内核函数使用规则进行安全性检测,性能评测表明安全模型系统带来的开销很小.Security in kernel extensions is important for operating systems. There are lots of attacks aiming at kernel function using rules in kernel extensions and bugs about these rules which are caused by programmers＇ mistakes. Hence, it is significant to check it. Several methods have been proposed to improve the security of the kernel extension, but few approaches check whether kernel function calling in kernel extensions works in the right rules. We propose an innovative KFUR kernel extension security model system, which could check whether kernel extensions violate using rules at runtime. KFUR is short for the kernel function usage rule. If kernel function calling meets KFUR model safe operation condition, it is permitted, otherwise it is reported to the operating system kernel and the kernel extension is stopped. The KFUR security model system is implemented in the Linux operating system and used in device drivers of the e1000 network card, the SATA hard disk and the HDA sound card. Security evaluation shows that our system can check kernel function usage rules and performance evaluation shows that our mechanism only brings little overhead.

关 键 词：操作系统 KFUR安全模型 内核扩展 内核函数使用规则 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]