摘要
由于终端平台上的应用具有多样性和无序性等特点,系统可信引导的单一链式验证机制并不适用于操作系统到应用之间的可信传递.为此,提出一种动态可信应用传递模型(DATTM),在保持应用装载的灵活性基础上,着重考虑了应用之间的权限隔离问题,最大程度地实现最小特权和按需即知等安全基本原则,进一步改善了系统度量和策略执行的效率和安全问题.
As the applications on terminal systems have a character of variety and unstability,the mono-chain of trust verification in system bootstrap is not fit to the trust transition from OS to applications.In this paper,we present a DATTM(dynamic application transitive trust model) which focuses on the separation of the privileges of different applications in addition to the flexibility of the applications loading.DATTM can achieve the security goal of 'least privileges' and 'need-to-know',further improve the security effectiveness and efficiency.
出处
《华中科技大学学报（自然科学版）》
EI
CAS
CSCD
北大核心
2005年第z1期310-312,共3页
Journal of Huazhong University of Science and Technology(Natural Science Edition)
基金
国家重点基础研究发展计划资助项目(G1999035801)
关键词
可信计算
可信传递
软件限制策略
trusted computing
transitive trust
software limitation policy
