具备完整性追溯的系统数据容灾机制  

System Data Disaster Tolerant Mechanism with Integrity Traceability

作　　者：杜军龙[1] 金俊平[1] 周剑涛 DU Junlong;JIN Junping;ZHOU Jiantao(Jiangxi Information Center,Nanchang 330001,China)

机构地区：[1]江西省信息中心

出　　处：《计算机工程》2019年第7期170-175,共6页Computer Engineering

基　　金：“核高基”重大专项“工业互联网安全操作系统产业化及规模化应用”(2017ZX01038103)

摘　　要：针对通用Linux平台因遭受异常攻击、破坏、宕机与病毒感染导致系统无法启动的问题,提出一种系统数据容灾机制(DDTM)。以安全上下文为宿主对象,基于可配置形式涵盖挂载预设、容灾粒度与改写策略库,通过文件完整性的追溯构建动态改写链。在DDTM形式化定义的基础上,给出细粒度的实现算法。实验结果表明,该机制可靠性高、实用性强。This paper proposes a system Data Disaster Tolerant Mechanism(DDTM) to address the problem that general Linux platforms suffer from abnormal attacks,damage,downtime,and virus infection,which leads to system startup failure. The security context is used as a host object,and the configurable form covers the mount preset,the disaster tolerance granularity,and the rewriting policy library. A dynamic rewriting chain is built by traceability of file integrity.Based on the formal definition of DDTM,a fine-grained implementation algorithm is given.Experimental results show that the mechanism is of high reliability and practicability.

关 键 词：数据容灾 系统异常 文件安全上下文 完整性追溯 动态改写 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]