【作者】 胡中庭；

【导师】 韩臻；

【作者基本信息】 北京交通大学 ， 计算机软件与理论， 2007， 硕士

【摘要】 操作系统安全是计算机系统安全的基础,操作系统的安全研究是一个军用到商用的过程,目前国内针对关键商用体系框架的研究还很少。随着网络技术的飞速发展和安全威胁的多样化,传统安全操作系统的设计理念和体系结构已难解决现实中的安全问题。本文主要在Linux操作系统的基础上,对其可信的若干问题进行了研究和实现。本文首先描述了安全操作系统以及可信计算的基本概念和理论,以及可信计算在构造安全操作系统的角色以及最新的发展。然后重点结合了可信计算的要求,安全操作系统的概念,以及操作系统安全可信链的思想,探讨并且研究了操作系统的启动可信以及文件系统和应用软件可信的实现方案。然后在Linux操作系统上运用Grub的可信,内核可信,LSM技术部分实现了操作系统可信链,同时实现了一个应用程序可信验证框架。最后,提出一些关于可信理论以及操作系统安全可信链的实现的改进目标。更多还原

【Abstract】 The security technology of operation system is the foundation to resolve information security problem. In China, one of the important directions to study secure operation system now emphasizes on the architecture and framework of them. But the research is a process moving from military area to commercial area, so at present, domestic research have not enough items on the security OS architecture for primary commercial using. With the fast development of network technique and with the emergence of diversification security threats, traditional design theory and structure of security OS can’t solve the secure problems in actual world. In this paper, we research and implement some trusted problems based on Linux.The paper first describes the secure operating system and the general idea of trusted computing, including the function and the development of the trusted computing in constructing a secure operating system. Then we research the implementation of trusted booting, trusted file systems, and trusted applications based on the theory of trusted operating system, the demand of trusted computing and the idea of secure trusted chain of OS. Then, we implement the part of the chain using trusted Grub, trusted kernel and Initrd, LSM technology on Linux operating system, together with the creative architecture of trusted applications proving. At last, we bring up some improvements about trusted theory and implementation of trusted chain of operating system.更多还原