| 基于LSM框架的审计系统的设计与实现 |
| |
| 作者姓名： | 王富良 贺也平 李丽萍 |
| |
| 作者单位： | 1. 中国科学院信息安全技术工程研究中心, 北京 100080;
2. 中国科学院软件研究所, 北京 100049;
3. 中国科学院研究生院, 北京 100049 |
| |
| 基金项目： | 国家自然科学基金项目(60083007);国家重点基础研究发展规划(973)项目(G1999035802)资助 |
| |
| 摘 要： | LSM是Linux系统的通用访问控制框架,在安胜安全操作系统V4.0中,我们在这一访问控制框架的基础上做了适当的扩展并设计实现了安全审计系统。该安全审计系统与安胜安全操作系统V2.0的审计系统相比,性能得到了很大的提高。另外,隐蔽通道会绕过系统的安全策略来进行非法的数据流传输,我们在审计系统中进行了实时检测和报警。
|
| 关 键 词： | 安全操作系统 安全审计 LSM框架 |
| 收稿时间： | 2004-11-17 |
| 修稿时间： | 2005-02-24 |
Design and Implementation of LSM Based Secure Auditing System |
| |
| Authors: | WANG Fu-Liang HE Ye-Ping LI Li-Ping |
| |
| Institution: | 1. Engineering Research Center for Information Security Technology, Chinese Academy of Sciences, Beijing 100080, China;
2. Institute of Software, Chinese Academy of Sciences, Beijing 100080, China;
3. Graduate School, Chinese Academy of Sciences, Beijing 100049, China |
| |
| Abstract: | LSM is the access control framework for Linux system.In the ANSHENG secure operating system V4.0,a secure auditing system based on the extended Linux Security Modules was introduced.Compared with the secure auditing system of ANSHENG secure operating system V2.0,the LSM based auditing system has a better performance.Last,the auditing system developed a method to detect covered channels in our ANSHENG secure operating system V4.0. |
| |
| Keywords: | secure operating system secure audit Linux Security Modules(LSM) |
|
| 点击此处可从《》浏览原始摘要信息 |
| 点击此处可从《》下载免费的PDF全文 |
|
