通用型安全操作系统解决方案浅析

在信息安全领域,随着攻击技术的不断升级和数据泄露事件的激增,业界越来越重视服务器操作系统的安全问题。文章从等级保护安全操作系统研究入手,介绍了两种安全操作系统解决方案,对比了通用型安全操作系统相比传统自主研发的安全操作系统的优势所在。文中重点阐述了通用型安全操作系统解决方案的技术优势和实现原理,结合增强型DTE、RBAC、BLP三种访问控制安全模型,重构操作系统的安全子系统(SSOOS),动态、透明提升操作系统安全等级,以实现通用型安全操作系统的解决方案。

Analysis on General-purpose Security Operating System Solution

With the continuous upgrade of attack technologies and the sharp rise in the data disclosure events,the people in the information security industry attach greater importance to the security problems of server operating system.Starting with the research on the classified protection security operating system,this article introduced the solutions of two kinds of security operating systems and analyzed the advantages of the general purpose security operating system over the traditional independently developed security operating system.In this article,we give full priority to represent the technical advantages of general purpose security operating system solution and the principles for achieving such solution.In combination with three enhanced type access control security models,namely DTE,RBAC and BLP,we reconstructed the security subsystem of operating system（SSOOS）and promote the security class of operating system in dynamic and transparent manner,so as to achieve the solution of general-purpose security operating system.