|国家科技期刊平台
首页|期刊导航|单片机与嵌入式系统应用|基于多内核的操作系统内生安全技术

基于多内核的操作系统内生安全技术OACSTPCD

Endogenous security technology based on multi-kernel operating system

中文摘要英文摘要

随着数字化、智能化、网络化趋势席卷全球,功能安全与网络安全日益交织、叠加,演变为内生安全问题.操作系统是计算机系统的重要组成部分,是软件架构的基石,操作系统级内生安全至关重要.基于拟态防御的动态异构冗余架构是实现操作系统内生安全的关键技术,但目前面临单内核操作系统不支持内生安全、操作系统级内生安全方案缺失、操作系统层共识机制设计不完善等挑战.本文从操作系统内生安全架构、异构冗余机制、高效通信和共识机制等方面展开分析和设计,提出了一套基于多内核的操作系统内生安全技术方案.

With the trend of digitization,intelligence,and networking sweeping the world,functional security and network security are increasingly intertwined and overlapping,evolving into endogenous security issues.The operating system is an important component of computer systems and the cornerstone of software architecture,and operating system level endogenous security is crucial.The dynamic heterogeneous redundant architecture based on mimetic defense is a key technology for achieving endogenous security in operating systems.However,it currently faces challenges such as single kernel operating systems not supporting endogenous security,lack of operating system level endogenous security solutions,and incomplete design of operating system level consensus mechanisms.This article analyzes and designs an embedded security architecture for operating systems,heterogeneous redundancy mechanisms,efficient communication,and consensus mechanisms,and proposes a multi kernel based embedded security technology solution for operating systems.

白紫星;戴华昇;宋怡景;蒋金虎;张为华;梁浩

复旦大学,上海 200433国家数字交换系统工程技术研究中心,北京 100101

计算机与自动化

多内核操作系统内生安全拟态防御

multi-kernel operating systemendogenous safetymimetic defense

《单片机与嵌入式系统应用》 2024 (001)

58-63 / 6

国家自然科学青年基金资助项目-基于拟态构造的云自适应认知安全防御理论与方法研究(62002383);面向泛在计算的多内核操作系统研究(62141211).

评论