权益分类	功能权益	普通用户	{{item.name}}会员
{{category.name}}	{{benefitItem.name}}

Study on Resource-Oriented Operating System

面向资源操作系统的研究

基本信息

批准号：
13480075
负责人：
KATO Kazuhiko
金额：
$ 9.02万
依托单位：
University of Tsukuba
依托单位国家：
日本
项目类别：
Grant-in-Aid for Scientific Research (B)
财政年份：
2001
资助国家：
日本
起止时间：
2001 至 2003
项目状态：
已结题

项目摘要

Our research examined functionalities that an operating system should have when used in an open environment. Along with that we have also developed fundamental technologies to realize the functionalities. In particular, our research focused on resource management, and attempted to solve security problems by enriching the core functionalities offered by the resource manager. We summarize the main contributions of our research as follows(1)Secure.Software Circulation System SoftwarePotIn our research, we developed a system, SoftwarePot, that can handle security problems that arise when circulating software in an open environment such as Internet. In the SoftwarePot system, software circulates in a "SoftwarePot" (or "pot") where the "pot" holds programs and data required for the execution. When a user executes software encapsulated within the pot, it is executed securely because the Pot and the host environment are isolated from each other. Moreover, our current research improves upon the previous SoftwarePot system. In particular, we increased its performance by a kernel module. We also applied SoftwarePot to host virtual services(2)Dynamic Security PolicyWe developed a system that can change access rights that a program has during run-time dynamically. Our mechanism enables one to make security policy descriptions in a fine-grained manner in order to minimize the damage of successful attacks. For example, even if an attacker takes over the execution control of a program, our system can minimize the damage by limiting its access rights

我们的研究考察了操作系统在开放环境中使用时应该具备的功能。与此同时，我们还开发了实现这些功能的基础技术。特别是，我们的研究集中在资源管理上，并试图通过丰富资源管理器提供的核心功能来解决安全问题。我们的研究主要贡献如下：(1)安全。软件流通系统软件在我们的研究中，我们开发了一个系统SoftwarePot，它可以处理在开放环境(如Internet)中流通软件时出现的安全问题。在SoftwarePot系统中，软件在“SoftwarePot”(或“POT”)中循环，其中“POT”保存执行所需的程序和数据。当用户执行封装在POT中的软件时，它被安全地执行，因为POT和主机环境彼此隔离。此外，我们目前的研究是在以前的SoftwarePot系统的基础上改进的。特别是，我们通过内核模块提高了它的性能。我们还应用了SoftwarePot来托管虚拟服务(2)动态安全策略我们开发了一个系统，它可以动态地改变程序在运行时拥有的访问权限。我们的机制使人们能够以细粒度的方式进行安全策略描述，以便将成功攻击的损害降至最低。例如，即使攻击者接管了程序的执行控制权，我们的系统也可以通过限制其访问权限来将损害降至最低