利用源代码信息流分析搜寻隐蔽存储信道

摘要

在分析国内外操作系统安全评估和测试方法的基础上，提出一套基于源代码信息流分析的隐蔽存储信道搜寻方法。与传统分析工具相比，不需要系统有严格的形式化描述和一致性证明，能找出更多的隐蔽存储信道。%A new method for detecting covert storage channel using source code info_flow analysis is proposed after analyzing the current technology of the security test and evaluation of OS,which needs less formalization description and coherence demonstration and can determinate more covert storage channels compared with the traditional ones in the world.