计算机技术与发展2016,Vol.26Issue(6):97-100,4.DOI:10.3969/j.issn.1673-629X.2016.06.021
基于LKM机制的Linux安全模块的研究
Research on Linux Security Module Based on LKM Mechanism
摘要
Abstract
In recent years,the Linux system has been widely concerned and applied in the computer industry because of its excellent stabil-ity,flexibility and scalability,and low cost. But in terms of security,the Linux kernel only provides access control as well as some security mechanisms. This is not enough for the security of the Linux system,which affects the further development of the Linux system and its wider application. In view of the current problems on security auditing of Linux system,a Linux security log module is designed in this paper on the basis of the research of LKM and HOOK technology. When an intruder enters the Linux server system through a user account and tries to modify the file,the system will generate a log file containing the user’ s information automatically. The module is suitable for monitoring the long-term stable operation of the Linux server system,whose configuration is less need to change. By the actual measure-ment,the security log module can record the user’s access or tampering with the system file in time and effectively,and provide useful in-formation for the security auditing of the system.关键词
可装载内核模块/钩子函数/安全模块/系统调用/短信报警Key words
LKM/hook function/security module/system call/SMS alarm分类
信息技术与安全科学引用本文复制引用
李晓丽..基于LKM机制的Linux安全模块的研究[J].计算机技术与发展,2016,26(6):97-100,4.基金项目
国家自然科学基金资助项目(61373169) (61373169)
南通大学自然科学基金资助项目(12Z057,13Z040) (12Z057,13Z040)