基于多级关键度的高可信安全关键系统  

High dependable safety critical systems based on multilevel criticality

作　　者：杨仕平[1] 桑楠[1] 吴新勇[1] 熊光泽[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,四川成都610054

出　　处：《系统工程与电子技术》2004年第2期277-282,共6页Systems Engineering and Electronics

基　　金：国家"十五"基金(41315040106);国防科技预研基金(2000J6.7.1.DZ0206)资助课题

摘　　要：为增强安全关键系统的可信性,在分析高可信保障机制现状的基础上,提出了一种集成式的高可信保障体系结构。为防止不同关键度子系统间的有害干扰,在分析信息安全领域内多级安全保障机制的基础上,研究了不同关键度子系统相互作用时应遵守的防危访问控制规则。为实现该规则,采用了基于元对象的反射技术,并就如何使用反射技术实现不同关键度子系统间的可靠互动进行了详细讨论。最后,给出了实验结果,同时就该领域内的相关工作及发展方向进行了展望。To improve the dependability of safety critical systems, after analyzing status quo of high dependable safeguard mechanism, an integrated high dependable safeguard systematic framework where several subsystems share the same system resources is proposed. However, the deleterious interferences among subsystems with different level of criticality must be avoided, for example, the residual design faults in low criticality software can not corrupt high criticality components. To resolve this problem, the multilevel security safeguard mechanisms used in information security domain are firstly analyzed. Following this, some safety access control rules abided by subsystems cooperating each another are proposed. To implement these rules, the reflective technology based on metaobject is adopted. About how to apply reflective technology to implement these rules is analyzed in details. At last, the result of experiment is supplied, and the related work and future trends of research in this field are listed.

关 键 词：安全关键系统 多级关键度 防危核 反射技术 安全保障机制 信息安全 计算机安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]