高安全级别操作系统安全标记机制的设计与实现

发布时间：2018-04-28 01:13

本文选题：安全操作系统 + 安全标记　；参考：《北京工业大学》2013年硕士论文

【摘要】：随着信息化时代的不断进步，计算机已经深入到社会生活的方方面面，也在潜移默化地影响着人们的生活习惯[1~3]。在步入信息时代的同时，人们也意识到信息安全的重要性。随着计算机网络的普及，计算机病毒、网络木马等已经严重威胁到人们的个人信息的安全，尤其是黑客的攻击更是防不胜防，这就导致了信息安全问题的日益突出[34]。目前较为普遍使用的安全产品有防火墙、杀毒软件等。这些安全产品是被动地对计算机病毒进行防御，并且效果差强人意。如何能有效地防范计算机病毒的攻击，保证人们的信息安全已经成为了当今急需解决的问题之一[4]。目前，我国已经开始研究具有自主知识产权的安全操作系统，并提出了计算机系统等级保护制度，其中强制访问控制、安全标记、安全策略等是关键技术，而安全标记是强制访问控制权限判断的基础。因此，对安全操作系统中关键技术的研究将对我国的信息安全的防护与建设有着重要的意义。本文的研究是基于Linux操作系统，，研究的关键问题包括系统中主/客体的标记及安全标记列表的设计和系统中的主/客体如何全面的标记。本课题的研究是基于Linux操作系统的，所以首先介绍了一下Linux系统中内核中的关键的数据结构，并且介绍一些安全模型，比如BLP安全模型、Biba安全模型，还介绍了基于角色的访问控制模型和DTE访问控制模型。为了能把安全标记设计的较为全面，本文还研究了SELinux安全机制，并对AppArmor安全机制、Smack安全机制和Tomoyo安全机制也进行简略的介绍[6~10]。根据计算机信息系统等级保护机制对安全标记功能的要求，结合工程实践，设计了一套安全标记。该安全标记能表示主/客体的保密机、完整级和工程中添加的具有个性化的安全标记属性，并对系统中的安全标记列表进行了定义。在对系统中新的主/客体进行安全标记的过程中，主要是依据这些安全标记列表，这些也叫做安全策略，再设计的过程中，安全标记的数据结构与安全策略的数据结构基本上类似，所以也沿用了安全标记的设计方案。在对操作系统中的主/客体进行标记的过程中，本课题依据Linux操作系统的特点，对系统中的主/客体进行特殊处理，保证了安全信息的标记工作全面有效地进行。本课题并列举了对应的实验数据，对安全标记的设计的可行性进行了有力的证明。
[Abstract]:With the continuous progress of the information age, the computer has gone deep into all aspects of social life, and has also influenced people's living habits. In the information age, people also realize the importance of information security. With the popularization of computer network, computer virus, network Trojan horse and so on have seriously threatened the personal information security of people, especially the attack of hackers is more and more difficult to prevent, which leads to the increasingly prominent problem of information security [34]. At present, the more commonly used security products have firewall, anti-virus software and so on. These safety products are passive against computer viruses, and the effect is unsatisfactory. How to prevent the attack of computer virus effectively and ensure people's information security has become one of the urgent problems [4]. At present, our country has begun to study the security operating system with independent intellectual property rights, and put forward the computer system hierarchy protection system, among which mandatory access control, security marking, security policy are the key technologies. And the security mark is the basis of the mandatory access control authority judgment. Therefore, the study of key technologies in secure operating system will be of great significance to the protection and construction of information security in our country. The research of this paper is based on Linux operating system. The key problems of the research include the design of the main / object label and the security tag list in the system, and how to mark the host / object comprehensively in the system. The research of this subject is based on the Linux operating system, so this paper first introduces the key data structure in the kernel of the Linux system, and introduces some security models, such as the BLP security model and the Biba security model. Role-based access control model and DTE access control model are also introduced. In order to design the security tags comprehensively, this paper also studies the SELinux security mechanism, and briefly introduces the AppArmor security mechanism and the Tomoyo security mechanism [6 / 10]. According to the requirements of the grade protection mechanism of computer information system for the function of security marking, a set of security marks is designed in combination with engineering practice. The security tag can represent the security machine of the host / object, the complete level and the individualized security tag attributes added in the project, and defines the list of the security tags in the system. In the process of marking a new host / object in a system, it is mainly based on these lists of security tags, also known as security policies, in the process of redesigning, The data structure of the security tag is basically similar to that of the security policy, so the design scheme of the security tag is followed. In the process of marking the host / object in the operating system, according to the characteristics of the Linux operating system, the subject / object of the system is specially processed, which ensures that the marking of the security information is carried out completely and effectively. In this paper, the corresponding experimental data are listed and the feasibility of the design of the safety marker is proved.
【学位授予单位】：北京工业大学
【学位级别】：硕士
【学位授予年份】：2013
【分类号】：TP309;TP316.81

【相似文献】