| 一种基于DOM盘的安全Linux系统的设计与实现 |
| |
| 引用本文： | 王丹丹,刘晓洁,李涛,浦海挺,刘莎.一种基于DOM盘的安全Linux系统的设计与实现[J].计算机工程,2005,31(22):143-145. |
| |
| 作者姓名： | 王丹丹 刘晓洁 李涛 浦海挺 刘莎 |
| |
| 作者单位： | 四川大学计算机系,成都610065 |
| |
| 基金项目： | 国家自然科学基金资助项目（60373110）;教育部博士点基金资助项目（20030610003） |
| |
| 摘 要： | 提出并实现了一种基于Linux的安全操作系统模型——NisecLinux。该系统以DOM（Disk on Module）盘为存储介质，实现了基于网络访问的强制访问控制机制。通过防火墙和入侵检测系统的联动大大增强了系统的安全防护能力；通过VPN技术使数据传输的安全性得到了保障；精简了内核和文件系统，使系统本身的性能得到改善；使用DOM盘加强其物理安全性。该系统在安全性方面达到了系统审计级的标准。
|
| 关 键 词： | 安全操作系统 访问控制 防火墙 入侵检测系统 VPN |
| 文章编号： | 1000-3428（2005）22-0143-03 |
| 收稿时间： | 2004-09-01 |
| 修稿时间： | 2004-09-01 |
Design and Implementation of A Secure Linux Operating System Based on DOM |
| |
| WANG Dandan,LIU Xiaojie,LI Tao,PU Haiting,LIU Sha.Design and Implementation of A Secure Linux Operating System Based on DOM[J].Computer Engineering,2005,31(22):143-145. |
| |
| Authors: | WANG Dandan LIU Xiaojie LI Tao PU Haiting LIU Sha |
| |
| Affiliation: | Computer Department, Sichuan University, Chengdu 610065 |
| |
| Abstract: | A secure operating system model named NisecLinux is presented. NisecLinux is implemented on DOM disk and has the mandatory access control mechanism based on network access. Its ability of security is greatly enhanced by an intrusion detection system related with a firewall; the security of data transfer is ensured via the technology of virtual private network; the performance of the NisecLinux is improved by condensing the kernel and file system; the physics security is strengthened by using DOM disk. NisecLinux has reached the level of system audit standard in security. |
| |
| Keywords: | Secure operating system Access control Firewall IDS VPN |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
