基于LINUX的强制访问控制机制及其安全测试自动化的研究

《基于LINUX的强制访问控制机制及其安全测试自动化的研究》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、北京交通大学硕士学位论文基于Linux的强制访问控制机制及其安全测试自动化的研究姓名：马妙霞申请学位级别：硕士专业：计算机软件与理论指导教师：翟高寿20061101北京交通大学硕士学位论文ABSTRACTTheInformationSystemSecurityhasbeenbecomingafocusofattentioninComputerSciencefield．Inthepastfewyears，theresearchreferingtoSecureOperatingSystemthatisthebasicoftheinformationsystemhasbeenascen

2、dingbydegree．AccessControlisthemaincomponentoftheOS’Ssecuritymechanism．Consequently，theresearchonsecureOSiSmainlyfocusedontheAccessControlenhancement．Ontheotherhand，theconstructionofsecureinformationsystemhasbeencomingupwiththeimportanceoftheinformationsystemsecuritytesting．Nowadays，thesecuri

3、tytestingisdonemanuallybythetestingengineers．Therearekindsofproblems，liketOOstrongsubjectivity，highworkloadandlongtestingcycle，thatareveryhardtocontr01．Asolutionisautomatictesting．Inonesentence，itissignificanttostudytheimplementationandautomatictestingofMandatoryAccessContr01．Thispaperstudied

4、thetheoryandrelatedresearchaboutMandatoryAccessControlinSecureOSbasedonwhatIenhancedtheMACmechanismonLinux．ThisMACmechanismcansupportthemulti—levelsecuritypolicesdefinedinamodifiedBLPmodule．ThestructureofthemechanismhasreferredtoGFACandLSMAccsessControlmodules．Itwasdevelopedwithplacing”hooks’

5、’inaccesscontrolrelatedsystemcallsandLKM．ThisMACisalsothetargetoftheautomatictestingsystemwhichisdevelopedbyme．Theautomatictestingsystemcandothetestingonboththewholesetofthefilesystemrelatedsystemcallsandsinglesystemcallaccordingtothetestingengineers’reqirements．Basedonthesepratices，thekeytec

6、hnologiestoimplementthesecureOSanditsautomatictestingwel"estudiedinthispapar．ThemaincreationofmyworkistheMACtargetedautomatictestingsystem．ThereisstillalongwaytocompletetheautomatictestingsystemoftheentireOS．Keywords：SecureOperatingSystem；Multi—LevelSecurityPolicy；MandatoryAccessControl；Linux

7、SecurityModule；SoftwareAutomaticTestingCLASSNO：TP316；TP309致谢在论文完成之际，谨向我尊敬的导师翟高寿副教授表示由衷的感谢!翟老师以其广蹲的知识、缜密的思维和严谨的工作研究作风，在论文选题和整个写作过程中都给了我精一tl,的指导和帮助，我的论文中凝聚了他大量的心血和汗水。翟老师从学习上、生活上都给予了我无私的关怀，使我不仅学到了专业知识，还为我今后的工作乃至人生积累了一笔宝贵的精神财富，使我受益终生!衷心感谢我所在工作单位北