欢迎您！东篱公司
退出
-
申报数据库
-
立项数据库
-
成果数据库
-
项目获奖数据库
中文摘要：
从完整性保护模型提出到现在，其成熟度远不如机密性模型．究其原因，完整级划分以及模型实用性是制约其发展的根本因素．从完整性模型的实用性角度出发，归纳总结几种现有完整性保护模型的优缺点，提出了一种实用型的动态完整性保护模型（dynamic integrity protection model, DMIP）．它面向Linux系统，解决了完整性级别划分困难以及现有完整性模型可用性不强的问题．针对来自网络的攻击以及本地恶意代码破坏系统完整性等问题给出了保护策略．从与Linux系统及系统中已有的应用程序的兼容性角度出发，DMIP做到了无代价兼容．给出了DMIP模型的不变式和约束，针对模型进行了安全定理的形式化证明，保证了模型的安全性．
英文摘要：
Since the integrity policy model has been proposed, its maturity has always been lower than that of the confidentiality policy model. The restriction is due to integrity level dividing and usability. In this paper, different kinds of integrity models are summarized from the point of practicability with their characteristics concluded. Based on the previous discussion, this paper presents a practical dynamic integrity protection model called DMIP. It simplifies the intricacy of integrity level dividing and solves the existing problems on practicability of current integrity models especially for Linux. The DMIP is designed to preserve the integrity of system from potential network-based attacks and local malicious files. From the usability of Linux, DMIP improves the current integrity protection models. The paper also shows the invariant and constraint of DMIP model and provides formalization proof in theory.
同期刊论文项目
同项目期刊论文
Security flaw of an improved user authentication scheme with user anonymity for wireless communicati
Broadcast revocation scheme in composite-order bilinear group and its application to attribute-based
期刊信息
位置：