摘要： 随着因特网的高速发展，安全问题显得日益严重。而计算机操作系统是信息系统的安全基础，但传统的操作系统安全机制已缺乏足够的灵活性，不能提供可根据具体应用系统配置特定安全策略的机制。提出了一种可定制的安全操作系统内核机制，用户可使用基于规则，面向事件的高层定义语言来描述安全策略而无需关心底层细节。系统具有良好的适应能力，可支持广泛的安全策略的实现。

关键词: 操作系统, 安全内核, 规则, 事件, 定制

Abstract: With the rapid development of Internet, the security problems have become more serious. Computer operating system is the basis of information system security. But traditional operating system lacks sufficient and flexible mechanisms for application-specific security policy. In this paper, we proposed the mechanisms of customizable secure operating system kernel. User can define many kinds of security policy in a high level rule based and event oriented specification language regardless of low-level details, which support implementation of diverse security policies.

中图分类号: 

• TP316.2