一种实用动态完整性保护模型的形式化分析  

A Practical Dynamic Integrity Protection Model

作　　者：杨涛[1,2] 王永刚[3] 唐礼勇[2] 孔令波[4] 胡建斌[2] 陈钟[2] 

机构地区：[1]清华大学生命科学学院,北京100084 [2]北京大学信息科学技术学院,北京100871 [3]国家计算机网络应急技术处理协调中心,北京100029 [4]北京交通大学软件学院,北京100044

出　　处：《计算机研究与发展》2013年第10期2082-2091,共10页Journal of Computer Research and Development

基　　金：国家自然科学基金项目(61170263,61003230)

摘　　要：从完整性保护模型提出到现在,其成熟度远不如机密性模型.究其原因,完整级划分以及模型实用性是制约其发展的根本因素.从完整性模型的实用性角度出发,归纳总结几种现有完整性保护模型的优缺点,提出了一种实用型的动态完整性保护模型(dynamic integrity protection model,DMIP).它面向Linux系统,解决了完整性级别划分困难以及现有完整性模型可用性不强的问题.针对来自网络的攻击以及本地恶意代码破坏系统完整性等问题给出了保护策略.从与Linux系统及系统中已有的应用程序的兼容性角度出发,DMIP做到了无代价兼容.给出了DMIP模型的不变式和约束,针对模型进行了安全定理的形式化证明,保证了模型的安全性.Since the integrity policy model has been proposed, its maturity has always been lower than that of the confidentiality policy model. The restriction is due to integrity level dividing and usability. In this paper, different kinds of integrity models are summarized from the point of practicability with their characteristics concluded. Based on the previous discussion, this paper presents a practical dynamic integrity protection model called DMIP. It simplifies the intricacy of integrity level dividing and solves the existing problems on practicability of current integrity models especially for Linux. The DMIP is designed to preserve the integrity of system from potential network-based attacks and local malicious files. From the usability of Linux, DMIP improves the current integrity protection models. The paper also shows the invariant and constraint of DMIP model and provides formalization proof in theory.

关 键 词：完整性策略 形式化模型 动态完整性级别 实用完整性 动态完整性保护模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]