|
|||||
|
|
| 基于信息流的可信操作系统度量架构 | |
| 引用本文： | 胡浩,张敏,冯登国.基于信息流的可信操作系统度量架构[J].中国科学院研究生院学报,2009,26(4):522-529. |
| 作者姓名： | 胡浩 张敏 冯登国 |
| 作者单位： | 1. 中国科学技术大学电子工程与信息科学系,合肥230027;中国科学院软件研究所信息安全国家重点实验室,北京100190;信息安全共性技术国家工程研究中心,北京100190 2. 中国科学院软件研究所信息安全国家重点实验室,北京100190;信息安全共性技术国家工程研究中心,北京100190 3. 中国科学院软件研究所信息安全国家重点实验室,北京,100190 |
| 基金项目： | 国家科技支撑计划，国家高技术研究发展计划(863计划) |
| 摘 要： | 将信息流和可信计算技术结合,可以更好地保护操作系统完整性.但现有的可信计算度量机制存在动态性和效率方面的不足,而描述信息流的Biba完整性模型在应用时又存在单调性缺陷.本文将两者结合起来,基于Biba模型,以可信计算平台模块TPM为硬件信任根,引入信息流完整性,并提出了可信操作系统度量架构:BIFI.实验表明,BIFI不仅能很好地保护信息流完整性,而且对现有系统的改动很少,保证了效率. |
| 关 键 词： | 操作系统完整性 信息流 可信计算 完整性度量 |
| 收稿时间： | 2009-02-20 |
| 修稿时间： | 2009-04-07 |
Information-flow-based measurement architecture of trusted operating system |
|
| HU Hao,ZHANG Min,FENG Deng-Guo.Information-flow-based measurement architecture of trusted operating system[J].Journal of the Graduate School of the Chinese Academy of Sciences,2009,26(4):522-529. | |
| Authors: | HU Hao ZHANG Min FENG Deng-Guo |
| Institution: | 1. Department of Electronic Engineering and Information Science, University of Science and Technology of China, Hefei 230027, China; 2. State Key Laboratory of Information Security, Institute of Software, Chinese Academy of Sciences, Beijing 100190, China; 3. National Engineering Research Center of Information Security, Beijing 100190, China |
| Abstract: | We are motivated to provide better protection for operating system integrity with the help of information flow integrity and trusted computing. Traditional measurement based on trusted computing is poor in dynamic measurement and efficiency, while Biba fails in practical application because of its monotonic behavior. In this paper, we design an information flow integrity architecture called BIFI based on classical integrity model Biba with TPM as root of trust. Experiments show that BIFI protects information flow integrity effectively with only a few changes to existing systems. |
| Keywords: | operating system integrity information flow trusted computing integrity measurement |
| 本文献已被 万方数据 等数据库收录！ | |
| 点击此处可从《中国科学院研究生院学报》浏览原始摘要信息 | |
| 点击此处可从《中国科学院研究生院学报》下载免费的PDF全文 | |