中文摘要：

系统调用是操作系统提供给用户的编程接口之一，用户可以通过系统调用完成所需的功能操作，但是也可以通过系统调用的漏洞进行破坏，因此对于安全相关的系统调用测试很重要，其中与安全访问策略相关的系统调用尤为重要，直接关系到资源的控制权力．本文针对微内核操作系统Minix3的安全访问策略，分析了与安全密切相关的典型系统调用，并利用CPN建立了相应的模型，之后对Minix3进行了访问控制测试，根据已经建立好的CPN模型来制定访问控制规则，采用变异测试保证其测试质量，并在实际的操作系统上进行编程测试，给出了实验结果．

英文摘要：

System call is the interface which the operating system provides to users for the usage of common functions as well as secur- ity consideration. Therefore it is very important to test system calls which are related to operating system security. Among them, the system calls, which are related to the security access policies, are especially important for the resource control right. In this paper, Minix 3, an open source micro-kernel operating system, was introduced and its typical system calls, such as security access policies, were analyzed and afterward their CPN models were respectively constructed. Some test cases were obtained according to the access rules derived from CPN model. Moreover the mutation testing was applied to the actual operating system to ensure the quality of the test. Finally the experimental results were given.