Author Login Chief Editor Login Reviewer Login Editor Login Remote Office

Computer Engineering ›› 2011, Vol. 37 ›› Issue (5): 161-163,166.

• Networks and Communications • Previous Articles     Next Articles

Application Research of SMACK in Embedded System

RUAN Yue 1,2, ZHENG Xiao 1,2   

  1. (1. School of Computer Science, Anhui University of Technology, Maanshan 243000, China; 2. School of Computer Science and Engineering, Southeast University, Nanjing 210096, China)
  • Online:2011-03-05 Published:2012-10-31

嵌入式系统中的SMACK应用研究

阮 越1,2,郑 啸1,2   

  1. (1. 安徽工业大学计算机学院,安徽 马鞍山 243000;2. 东南大学计算机科学与工程学院,南京 210096)
  • 作者简介:阮 越(1972-),男,讲师、博士研究生,主研方向: 系统安全,嵌入式系统;郑 啸,副教授、博士
  • 基金资助:
    国家自然科学基金资助项目(61003311);安徽省高等学校优秀青年教师科研基金资助项目(2007jq1028)

Abstract: This paper starts from an introduction of Mandatory Access Control(MAC) and presents some technologies which implement it in Linux mainline kernel, including SELinux and SMACK, and gives an example in detail of how to define SMACK rule set to address the requirements of constructing sandbox for third-party applications in Linux based mobile phone. Result of test indicates that running smack has fewer memory consumption and more efficient CPU performance comparing with SELinux, and SMACK is more suitable for embedded system. .

Key words: Mandatory Access Control(MAC), Simplified Mandatory Access Control Kernel(SMACK), embedded system, security, sandbox

摘要: 介绍强制访问控制(MAC)方法和在Linux主流内核版本中MAC主要的实现技术,包括SELinux和SMACK。将SMACK应用到典型的嵌入式设备?——智能手机上,通过定义SMACK规则为第三方软件构造沙盒。测试结果表明,与SELinux相比,SMACK具有较少的内存消耗和较高的运行效率,更适用于嵌入式系统。

关键词: 强制访问控制, 简单强制访问控制内核, 嵌入式系统, 安全, 沙盒

CLC Number: