Evaluation of Performance of Secure OS Using Performance Evaluation Mechanism of LSM-Based LSMPMON
Evaluation of Performance of Secure OS Using Performance Evaluation Mechanism of LSM-Based LSMPMON
复制标题
利用基于LSM的LSMPMON性能评估机制评估安全操作系统的性能
DOI：
--
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
Toshihiro Yamauchi
中科院分区：
文献类型：
--
作者：
Kenji Yamamoto;Toshihiro Yamauchi
以安全性OS（安全OS）吸引了注意，这是一种最大程度地减少各种侵入造成的损害的方法。安全OS可以通过使用强制性访问控制（MAC）限制由于攻击而造成的损害。在某些项目中，已经开发了针对Linux的安全OS。在这些OS中，已经采用了不同的实施方法。但是，没有方法可以轻松评估安全操作系统的性能，并且实现方法与性能之间的关系尚不清楚。 Linux安全模块（LSM）经常实现Linux中的安全OS。因此，我们确定引入安全OS对OS性能的效果，以及通过使用架空测量工具，LSM性能监视器（LSMPMON）来实现方法的差异； LSMPMON可用于评估三种不同的安全OS。
Security focused OS (Secure OS) is attracting attention as a method for minimizing damage caused by various intrusions. Secure OSes can restrict the damage due to an attack by using Mandatory Access Control (MAC). In some projects, secure OSes for Linux have been developed. In these OSes, different implementation methods have been adopted. However, there is no method for easily evaluating the performance of the secure OS in detail, and the relationship between the implementation method and the performance is not clear. The secure OS in Linux after version 2.6 has often been implemented by Linux Security Modules (LSM). Therefore, we determine the effect of introducing the secure OS on the performance of the OS, and a characteristic by the difference of the implementation method by using the overhead measurement tool, the LSM Performance Monitor (LSMPMON); the LSMPMON can be used to evaluate three different secure OSes.