基于Linux的可信计算系统的设计与实现  

Design and implementation of trusted computing system based on Linux

作　　者：郑赞红[1] ZHENG Zan hong(Guangdong Ocean University,Zhanjiang 524088,China)

机构地区：[1]广东海洋大学

出　　处：《电子设计工程》2019年第22期74-78,共5页Electronic Design Engineering

摘　　要：针对内网资源的互联共通和共享,导致信息安全和信息网络化的矛盾日益突出的问题,文中设计和实现了一种基于linux的可信计算系统。该系统采用客户端/服务器的设计架构能根据终端的状态对终端进行认证,并能通过分析接入终端的软件行为和硬件资源对终端进行监控。该系统以层次分析法为基础,并为适应系统内网的状态变化引入贝叶斯网络模型进行可信度量化计算,使整个模型具有自动更新的能力。系统测试结果表明,文中所提出系统具有更好的针对性,对终端的完整性验证更有效。Aiming Aiming at the common problem of interconnected and shared intranet resources,which leads to the increasingly prominent contradiction between information security and information network,a linux-based trusted computing system is designed and implemented. The system adopts a client/server design architecture to authenticate the terminal according to the state of the terminal,and can monitor the terminal by analyzing the software behavior and hardware resources of the access terminal. The system is based on the analytic hierarchy process,and introduces the Bayesian network model to adapt to the state change of the intranet. The trust model is calculated and the whole model has the ability to update automatically. The system test results show that the proposed system has better pertinence and is more effective for terminal integrity verification.

关 键 词：LINUX 可信计算 贝叶斯网络 层次分析法 网络安全 客户端 服务器 终端 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]