支持安全策略检查的用户态驱动框架研究  

Research on security policy enforced user-level device driver framework

作　　者：陈昊[1] 罗蕾[1] 李允[1] 陈丽蓉[1] Chen Hao;Luo Lei;Li Yun;Chen Lirong(School of Computer Science&Engineering,University of Electronic Science&Technology of China,Chengdu 611731,China)

机构地区：[1]电子科技大学计算机科学与工程学院,成都611731

出　　处：《计算机应用研究》2018年第4期1142-1149,共8页Application Research of Computers

基　　金：国家"十二五"核高基重大专项资助项目(2009ZX01038-002-003)

摘　　要：驱动程序对系统安全性和稳定性起着至关重要的作用,但由于其复杂和多样性,导致难以成为操作系统的可信模块。近期研究表明,在用户空间内执行驱动程序,可提高系统稳定性并降低开发难度,但对系统产生了潜在的安全威胁。为此,从限制驱动程序可能的行为出发,对面向安全的轻量级通用用户态驱动框架进行了研究,通过内核态驱动命令解释器与安全策略检查相结合的手段,确保驱动模块的安全性与隔离性。通过实验测量框架对系统产生一定负载,但不会对系统的正常运行产生明显影响。Device drivers play critical roles in overall security and reliability of an operating system.However,the complexity and variety make them unexpected to be trusted.Recent efforts have demonstrated that running device drivers in the user-space will improve the system reliability and reduce the difficulty of driver development.However,it also brings in potential threats.This paper presented a general lightweight user-level driver framework dedicated to security purpose.The framework restricted the possible behaviors of a driver in a secure boundary by integrating security strategies into a kernel-level command interpre-ter,and thus,ensured the security and isolation of device drivers.The evaluation shows that minor overhead will imposed to the system when compares to the kernel-level device drivers,and this overhead does not make a significant impact to the system performance.

关 键 词：用户态驱动 安全性 操作系统 页表 驱动命令解释器 中断 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]