摘要：

通用Linux平台需要多种强制性访问控制(MAC)机制并存,现有并存技术存在灵活度不高、平台迁移性差和系统开销增幅大的问题。为此,提出一个多种MAC机制并存的动态装载方法。通过构建跳跃表实现多种MAC机制的并行装载,利用优先级调度算法对装载后的MAC机制实施灵活调度。测试结果表明,相比于通用堆叠并存技术,该方法具有可行性和低耗性,并且装载后的模块具备安全防篡改功能。

关键词: 强制性访问控制, 动态装载, 跳跃表, 优先级调度, 防篡改

Abstract: General Linux platform requires multiple Mandatory Access Control (MAC) mechanisms,the existing coexistence technology has the problems of low flexibility,poor mobility of platform and large increase of system overhead.Therefore,a dynamic loading method of multiple coexisting MAC mechanisms is proposed.The parallel loading of multiple MAC mechanisms is realized by constructing the SkipList,and the MAC mechanism after loading is flexibly scheduled by the priority scheduling algorithm.Test results show that,compared with the common stacking coexistence technology,this method is feasible and low-cost,and the module after loading has the function of security and tamper-proof.

Key words: Mandatory Access Control(MAC), dynamic loading, SkipList, priority scheduling, tamper-proof

中图分类号: 

• TP316