【摘要】 在多级安全系统中,隐通道能够使通信双方以违反安全策略的方式传递信息,带来不必要的安全隐患,而现有的标识和消除隐通道的方法对系统性能影响较大。深入研究隐通道的带宽特征,当不同安全级主体使用隐通道进行通信时,针对主体对共享资源属性操作频度的不同,提出了一种基于LRU(least recently used)的隐通道监测方法。该方法无需标识共享资源属性,只针对使用隐通道的主体进行处理,从空间和时间上都较大地改善了监测隐通道所带来的性能损失。更多还原

【Abstract】 In multi-level security systems,covert channel can be used to transmit information between two users against security policies,bringing unnecessary security hidden threats.However,current approaches for identifying and eliminating covert channels have much effect on the system performance.Deep research was made on the bandwidth characteristic of the covert channel,and an LRU(least recently used)-based covert channel monitoring approach was proposed,according to the difference of subjects to the operation frequency of shared attributes during communicating by covert channel at different security levels.This approach does not require to identify shared resource attributes,and only processes the subjects making use of the covert channels,resulting in improvement on the performance of covert channel monitoring from both space and time aspect.更多还原