摘要： 提出并实现了一种基于Linux的安全操作系统模型——NisecLinux。该系统以DOM(DiskonModule)盘为存储介质,实现了基于网络访问的强制访问控制机制。通过防火墙和入侵检测系统的联动大大增强了系统的安全防护能力;通过VPN技术使数据传输的安全性得到了保障;精简了内核和文件系统,使系统本身的性能得到改善;使用DOM盘加强其物理安全性。该系统在安全性方面达到了系统审计级的标准。

关键词: 安全操作系统, 访问控制, 防火墙, 入侵检测系统, VPN

Abstract: A secure operating system model named NisecLinux is presented.NisecLinux is implemented on DOM disk and has the mandatory access control mechanism based on network access.Its ability of security is greatly enhanced by an intrusion detection system related with a firewall;the security of data transfer is ensured via the technology of virtual private network;the performance of the NisecLinux is improved by condensing the kernel and file system;the physics security is strengthened by using DOM disk.NisecLinux has reached the level of system audit standard in security.

中图分类号: 

• TP316.81