基于微内核的电力专用安全操作系统技术研究  

Research on Power Private Micro Kernel-based Secure Operating System Technology

作　　者：杨维永 刘苇 黄皓[2] 祁龙云 郭毅 

机构地区：[1]南京南瑞集团公司信息通信技术分公司,江苏南京210003 [2]南京大学,江苏南京210046

出　　处：《电力信息与通信技术》2016年第11期22-27,共6页Electric Power Information and Communication Technology

基　　金：国家自然科学基金资助项目(61321491);江苏经信委资助项目;国网电力科学研究院科技项目(5246DR150002)

摘　　要：针对工控安全形势日益严峻,工控终端在操作系统层面缺乏全面的安全防护体系,无法适应安全新局势这一问题,文章通过研究面向工控的自主可控安全操作系统关键技术,在工控安全操作系统NARIsecOS基础上,提出了内核完整性保护方案,并对部分工作进行了形式化验证。通过这一技术的研究,可以保证工控终端操作系统的安全,进而在操作系统层面使工控终端具备免疫病毒木马、抵御黑客攻击的能力。安全操作系统在工控终端上的研究应用将有助于抵御大部分的工控安全威胁。Industrial security situation is increasingly serious, and in the industrial security systems, there isn＇t a comprehensive security system at the operating system level for industrial control terminal, which is unable to adapt to the security situation under the new situation. To effectively solve the above problems, this paper studied the key technologies of the self controlled safe operating system for industrial control, proposed a kernel integrity protection program based on NARIsecOS, carried out formal verification of part of the work. Using this technology, the safety of industrial control terminal operating system can be guaranteed, and industrial control terminal with the ability of Trojan virus immunity and against hacker attacks at the operating system level can be made. Research and application of security operating system will withstand most of the industrial control security threats.

关 键 词：微内核 NARIsecOS 内核完整性 安全操作系统 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]