安全关键系统中操作系统的安全分析  

Safety Analysis of Operating System in Safety Critical System

作　　者：任晓瑞[1] 陈晓磊[1] REN Xiao-rui;CHEN Xiao-lei(Xi′an Aeronautics Computing Technique Research Institute,AVIC,Xi′an 710068,China)

机构地区：[1]航空工业西安航空计算技术研究所,陕西西安710068

出　　处：《航空计算技术》2020年第3期117-121,共5页Aeronautical Computing Technique

基　　金：国家自然科学基金项目资助(61732001)。

摘　　要：随着计算机软件的广泛使用,软件安全成为普遍关注的问题。在分析安全相关标准的基础上,建议采用基于产品和基于过程相结合的方法开发操作系统。选取面向安全领域的综合化系统,建立分区操作系统功能到通用计算平台安全功能需求的映射关系,开展失效和危害分析,导出安全需求及缓解措施,借鉴模块化开发的思想,建立操作系统的安全合约,随使用的具体系统,从需求、架构、行为、性能等四个层次,分析其安全合约中的失效是否可接受,从而完成系统安全评估。采用方法的OS安全合约可支持多个项目不同应用的重用。The field of safety critical software has been subject to continuous development in recent years,both in terms of the scale and the complexity of the critical software being developed.This paper adopts the approach that combine the evidence-based and process-based by study the safety standards.Studies are carry on the OS inintegrated safety critical system,mapping the function requirement with the partition operating system,analyzing the failure effect and reason of the OS and the mitigation strategy,establishing the safety contract between the OS and the application,instancing the contract in the level of requirement,architecture,behavior and performance while using in a specific system,judge the safety acceptability of OS during the assessment of the objective system.By this way,the safety case of OS can be reused in various applications.

关 键 词：操作系统 安全 风险 安全合约 危害 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]