基于Space系统的叠合式安全机制  

Overlay Security Mechanism Based on Space Operating System

作　　者：轩浩 刘金刚[1,2] XUAN Haol;LIU Jin-Gang(Information Engineering College, Capital Normal University, Beijing 100048, China;Institute of Computing Technology, Chinese Academy of Sciences, Beijing 100080, China)

机构地区：[1]首都师范大学信息工程学院,北京100048 [2]中国科学院计算技术研究所,北京100080

出　　处：《计算机系统应用》2018年第5期26-32,共7页Computer Systems & Applications

摘　　要：基于Space系统(Space Operating System,Space OS)提出了一种叠合式安全机制,该机制在保证安全性的同时具有实用性的特点.首先对系统安全域进行划分,定义了安全机制的要求.提出了安全机制的设计思想,通过形式化方法证明其达到安全的要求,然后通过Overlay文件系统说明技术的可行性,并将该安全机制应用于Space OS上.最后对其进行性能测试,安全性测试以及实用性测试.测试表明,叠合式安全机制具有安全性和实用性,对Space OS运行速度影响很小,具有实用价值.In this study, we propose an Overlay security mechanism, which is secure and practical, based on Space Operating System（Space OS）. Firstly, the system security domain is divided, and the requirement of security mechanism is defined. The design idea of security mechanism is put forward, and the security requirement is proved by formal method. Then, the feasibility of the technology is explained by Overlay file system, and the security mechanism is applied to Space OS. Finally, the performance test, security test, and practicability test are carried out. The test shows that the Overlay security mechanism is secure and practicable. It has little effect on the speed of the Space OS has practical value.

关 键 词：Space系统 安全机制 形式化方法 Overlay文件系统 实用性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]