计算机应用与软件2012，Vol.29Issue(12)：99-102,136,5.DOI:10.3969/j.issn.1000-386x.2012.12.028
一种Xen细粒度强制访问控制框架的设计与实现
DESIGN AND IMPLEMENTATION OF A FINE-GRAINED MANDATORY ACCESS CONTROL FRAMEWORK OF XEN
摘要
Abstract
Secure isolation and sharing between virtual machines can be realised by using mandatory access control (MAC) technology, but current MAC mechanism can' t effectively protect the resources inside the virtual machine. Based on thorough analysis on current Xen vir-tualisation technologies and the mandatory access technology, in the paper we propose a virtual mandatory access control (VMAC) framework in light of Xen Security Module (XSM)/Flask, the framework provides centralised management and operation on two level security policy: the virtual machine ( VM) and the virtual machine monitor ( VMM ) , and implements a fine-grained mandatory access control of Xen.关键词
Xen/XSM/Flask/强制访问控制/细粒度Key words
Xen/XSM/Flask/Mandatory access control/Fine-grained分类
信息技术与安全科学引用本文复制引用
王静,徐开勇,赵彬..一种Xen细粒度强制访问控制框架的设计与实现[J].计算机应用与软件,2012,29(12):99-102,136,5.基金项目
武器装备预研重点基金项目(9140A15060311JB5201). （9140A15060311JB5201）
