摘要： 针对通用Linux平台因遭受异常攻击、破坏、宕机与病毒感染导致系统无法启动的问题，提出一种系统数据容灾机制（DDTM）。以安全上下文为宿主对象，基于可配置形式涵盖挂载预设、容灾粒度与改写策略库，通过文件完整性的追溯构建动态改写链。在DDTM形式化定义的基础上，给出细粒度的实现算法。实验结果表明，该机制可靠性高、实用性强。

关键词: 数据容灾, 系统异常, 文件安全上下文, 完整性追溯, 动态改写

Abstract: This paper proposes a system Data Disaster Tolerant Mechanism(DDTM) to address the problem that general Linux platforms suffer from abnormal attacks,damage,downtime,and virus infection,which leads to system startup failure. The security context is used as a host object,and the configurable form covers the mount preset,the disaster tolerance granularity,and the rewriting policy library. A dynamic rewriting chain is built by traceability of file integrity.Based on the formal definition of DDTM,a fine-grained implementation algorithm is given.Experimental results show that the mechanism is of high reliability and practicability.

Key words: data tolerance, system abnormal, file security context, integrity traceability, dynamic rewriting

中图分类号: 

• TP309