| 本文已被：浏览 5076次 下载 7450次 |
码上扫一扫！ |
|
|
| 安胜安全操作系统的隐蔽通道分析 |
|
卿斯汉1,2,3, 朱继锋1,2,3
|
|
1.中国科学院,信息安全技术工程研究中心,北京,100080;2.中国科学院,软件研究所,北京,100080;3.中国科学院,研究生院,北京,100039
|
|
| 摘要: |
| 安胜安全操作系统是自主研制的基于Linux的高安全等级安全操作系统,包括安全内核,安全架构与安全模型.总结了对该系统进行的隐蔽通道分析方法,首次报道基于Linux内核开发的安全操作系统的隐蔽通道分析结果.应用新型的"回溯方法"发现了某些新的隐蔽通道.对被标识的隐蔽通道,准确地计算了它们的带宽,并进行了适当的隐蔽通道处理. |
| 关键词: 安胜安全操作系统 隐蔽通道分析 回溯方法 存储通道 信息流 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Natural Science Foundation of China under Grant No.60083007(国家自然科学基金);the National Grand Fundamental Research 973 Program of China under Grant No.G1999035810(国家重点基础研究发展规划(973)) |
|
| Covet Channel Analysis on ANSHENG Secure Operating System |
|
QING Si-Han,ZHU Ji-Feng
|
| Abstract: |
| ANSHENG operating system is a secure operating system with high security level based on Linux, which is independently developed with the security kernel, security framework and security models. In this paper, the approaches to analyzing covert channels in the underlying system are summarized, and it is the first time that the covert-channel-analysis results on a secure operating system based on Linux kernel have ever been reported. Some new covert channels have been found by the novel backward tracking approach. For the identified covert channels, accurate bandwidth computation and appropriate covert-channel handling have been performed. |
| Key words: ANSHENG secure operating system covert channel analysis backward tracking approach storage channel information flow |
