策略灵活安全系统的设计与实现  

Design and Implementation on a Policy-Flexible System

作　　者：訾小超[1,2] 茅兵[1,2] 曾庆凯[1,2] 谢立[1,2] 

机构地区：[1]南京大学计算机软件新技术国家重点实验室,南京210093 [2]南京大学计算机科学与技术系,南京210093

出　　处：《计算机研究与发展》2004年第2期299-305,共7页Journal of Computer Research and Development

基　　金：国家"八六三"高技术研究发展计划基金项目 ( 2 0 0 1AA14 40 10 )

摘　　要：安全需求多样化对操作系统提出策略灵活性要求 ,传统操作系统把对安全策略的支持分散到系统相关功能模块中 ,如文件系统及进程通信等 ,难以满足这种需求 该文通过对操作系统中策略相关功能部件的分析 ,提出了一种策略灵活的安全体系结构 ,并在Linux基础上实现该结构 同以往研究相比 ,该结构通过对安全属性的统一维护简化了策略冲突协调的复杂性 ,既方便用户灵活配置已有安全策略 。Security requirements' diversity demands the flexibility and scalability of security policy, but traditional operating systems implement security policies in many components so that it is difficult to meet the needs. A policy-flexible system framework is brought forward through the analysis of all the facilities related to security policy in the system, and this framework is implemented based on Linux. Compared with the previous researches, the framework simplifies policies conflict mediating by centralized management of security attributes. So this framework can support users in configuring security policies flexibly, and add new security policies based on new security attributes according to security requirements in their fields.

关 键 词：信息安全 策略灵活 多安全策略 安全操作系统 

分 类 号：TP316.1[自动化与计算机技术—计算机软件与理论] TP309.2[自动化与计算机技术—计算机科学与技术]