基于LRU的隐通道监测  

Covert Channel Monitoring Based on LRU

作　　者：李晔锋 公备[1] 徐达文[2] LI Yefeng;GONG Bei;XU Dawen(College of Computer Science and Technology, Beijing University of Technology, Beijing 100124, China;College of Electronic and Information Technology, Ningbo University of Technology, Ningbo 315211, China)

机构地区：[1]北京工业大学计算机科学与技术学院,北京100124 [2]宁波工程学院电子与信息工程学院,浙江宁波315211

出　　处：《东华大学学报（自然科学版）》2019年第5期715-719,共5页Journal of Donghua University(Natural Science)

基　　金：国家自然基金青年科学基金资助项目(61501007)

摘　　要：在多级安全系统中,隐通道能够使通信双方以违反安全策略的方式传递信息,带来不必要的安全隐患,而现有的标识和消除隐通道的方法对系统性能影响较大。深入研究隐通道的带宽特征,当不同安全级主体使用隐通道进行通信时,针对主体对共享资源属性操作频度的不同,提出了一种基于LRU(least recently used)的隐通道监测方法。该方法无需标识共享资源属性,只针对使用隐通道的主体进行处理,从空间和时间上都较大地改善了监测隐通道所带来的性能损失。In multi-level security systems, covert channel can be used to transmit information between two users against security policies, bringing unnecessary security hidden threats. However, current approaches for identifying and eliminating covert channels have much effect on the system performance. Deep research was made on the bandwidth characteristic of the covert channel, and an LRU (least recently used)-based covert channel monitoring approach was proposed, according to the difference of subjects to the operation frequency of shared attributes during communicating by covert channel at different security levels. This approach does not require to identify shared resource attributes, and only processes the subjects making use of the covert channels, resulting in improvement on the performance of covert channel monitoring from both space and time aspect.

关 键 词：隐通道 最近最少使用算法 多级安全系统 频度 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]