多保护域进程模型及其实现.pdfVIP

1 Vol.33 No. 1 2005 1 ACTA ELECTRONICA SINICA Jan. 2005 1,2 1 1 谢 钧 ,黄 皓,张 佳 (1., 210093; 2.,210007) : , . ,, . . : ; ; ; : TP393 : A : 037222112 (2005) 012 00382 05 A Multi2Protection Domains Proces s Model a nd Its Imple me ntation 1,2 1 1 XIE Jun ,HUANGHao ,ZHANGJia ( 1. StateKey Laboratory for Novel Software Technology, Nanjing University, Nanjing , Jiangsu 210093, China; 2. nstitut e of Command Automation , PLA University of Science and Technology ,Nanjing , J iangsu 210007, China) Ab stract : any secure operating systemshavesome privilegedprocessesortrustedprocesseswhich arealwaysatrisk ofbeing hijacked byvarious attacks such asthebufferoverflowattack.Oncethey arehijacked,thesecurity ofthewholesystemwouldbedam2 aged.In thispaper,amult2iprotection domainsprocessmodel isdescribedwhichprovidesfine2grainedkernel levelprotection for codes and datawithin process address space.The fine2grained internal protection of process can effectively prevent attackersfromhijacking thewhole processbydamagingthe process. sdataor codes.Thispaperofferstwodesignsforthismodel anda prototype implementation of oneofthem. Ke y word s : protection domain;accesscontrol;computer security;operating system , 1 . , . ,.root ,root . , LS( ultilevel S