动态安全策略的权限撤销研究

在分析以往安全操作系统中权限撤销机制的基础上，提出一种基于VTC和in progress 交叉链表的权限撤销机制。该机制通过对权限有效性、时效性检查以及in progress权限双向搜索实现权限撤销，并在基于L4微内核的原型系统中得以实现。实验表明，该撤销机制增加了1%左右的系统性能损耗。

Research on permission revocation in dynamic security policies

In this paper a revocation mechanism based on VTC and in-progress cross list was presented. The revocation is implemented by checking the validation and the timestamp of permissions and a two-way searching on the in-progress cross list on L4 microkernel. Experimental results show that the mechanism is effective and only increases approximately 1% system overhead.