Hades高可信架构中分区间信息流控制的研究

摘要

为保障Hades高可信嵌入式操作系统体系架构自身的可信性,必须对其不同安全等级分区之间的信息交互进行严格的控制.该文分析了现有采用分区机制的可信系统的信息流控制方法的不足,提出了一种信息流控制模型,建立了信息流控制机制,并通过实验原型进一步验证了该信息流控制技术的正确性和有效性.%To assure the trustworthiness of high-trusted architecture of embedded operating system that named Hades, the inter-partition information flow of Hades must be controlled strictly. By analyzing the limitation of existing methods, we present a new information flow control model and construct a information flow mechanism between partitions. The accuracy of these model and mechanism are verified through the experiment.