论文部分内容阅读
系统调用是操作系统提供给用户的编程接口之一,用户可以通过系统调用完成所需的功能操作,但是也可以通过系统调用的漏洞进行破坏,因此对于安全相关的系统调用测试很重要,其中与安全访问策略相关的系统调用尤为重要,直接关系到资源的控制权力.本文针对微内核操作系统Minix 3的安全访问策略,分析了与安全密切相关的典型系统调用,并利用CPN建立了相应的模型,之后对Minix 3进行了访问控制测试,根据已经建立好的CPN模型来制定访问控制规则,采用变异测试保证其测试质量,并在实际的操作系统上进行编程测试,给出了实验结果.
System call is the operating system to provide users with one of the programming interface, the user can perform the required function through the system call operation, but also through the system call loopholes in the destruction, it is important for safety-related system call test, and System call related to security access policy is particularly important and directly related to the control power of resources.This paper analyzes the security and security of a typical system call for Minix 3 micro-kernel access system and uses CPN to establish the corresponding model Afterwards, Minix 3 was tested for access control. According to the established CPN model, the access control rules were formulated. The variation test was used to ensure the quality of the test and the programming was conducted on the actual operating system. The experimental results were given.