摘要： 研究了实现操作系统安全增强模型通用化的途径。把安全增强模型中与操作系统体系结构相关的部件隐藏在系统特征封装层,从而降低了模型的系统依赖性,使之适用于不同类型的操作系统;引入安全策略抽象层,使安全增强模型独立于任何特定的安全策略,使之对不同安全策略通用;在模型中增加应用支持层,实现在安全增强的操作系统环境下灵活支持已有应用程序。

关键词: 安全模型, 操作系统安全加强, 安全操作系统

Abstract: Ways to make general of a security enhancement model for operating systems are studied. By hiding system-related components from the rest part, the security enhancement model is made to be less dependent on specific system structures and can be applied to different operating system. By using abstraction, the model is made to be policy neutral and different security policies can be realized in its framework. By introducing application supporting layer, the model is able to support running various pre-existing applications in a secure operating environment.

中图分类号: 

• TP316