%0 Journal Article
%T Impose Privilege-Divided Policy on Security-Enhanced Operation System
安全操作系统中系统分权的实现
%A JIN Lei LIN Zhi-Qiang MAO Bing XIE Li
%A
金雷
%A 林志强
%A 茅兵
%A 谢立
%J 计算机科学
%D 2003
%I
%X In Linux management is still based on some privilege system call,and this is a great underlying threat to system. Privilege-Divided Model (PDM) comes out to solve the problem. In the model, privilege is divided into some parts,each part or several parts can only do some special task which need privilege. So the potential threat is cut down by this mechanism. This paper gives an analysis on the idea of privilege-divided,and illuminates how to design and get privilege-divided system into reality.
%K Privilege-divided
%K Security
%K Access control
%K Operation system
安全操作系统
%K 系统分权
%K Linux
%K 访问控制系统
%K 计算机系统
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=64A12D73428C8B8DBFB978D04DFEB3C1&aid=2C0CCE4093C1A099&yid=D43C4A19B2EE3C0A&vid=340AC2BF8E7AB4FD&iid=59906B3B2830C2C5&sid=E2546871E5B846EF&eid=0B4F496D54044D86&journal_id=1002-137X&journal_name=计算机科学&referenced_num=0&reference_num=5