Research and implementation of automatic evaluation method for operating system security

摘要

The security of the Operating System (OS) is the basis of a complex computer system. OS used in key institutions of government and economics must be tested and certified according to the national/international standards. Several security standards and criteria related to operating system security are analyzed. Following with the standards and criteria, a test and evaluation method that combines static and dynamic test techniques is proposed. By creating and managing target properties database, test samples database, knowledge database and task database, an evaluation system is designed and implemented, which can make the test and evaluation of operating system functions automatic and effective. Experiments show that our system can reduce the workload of test and evaluation and keep the objectivity and authority.