Implementation and Automatic Testing for Security Enhancement of Linux Based on Least Privilege
-
- 발행기관
- 보안공학연구지원센터(IJSIA) 바로가기
-
- 간행물
- International Journal of Security and Its Applications SCOPUS 바로가기
-
- 통권
- Vol.2 No.3 (2008.07)바로가기
-
- 페이지
- pp.93-100
-
- 저자
-
- 언어
- 영어(ENG)
-
- URL
- https://www.earticle.net/Article/A88865
※ 원문제공기관과의 협약기간이 종료되어 열람이 제한될 수 있습니다.
원문정보
초록
- 영어
- Nowadays, technologies of information security have been attached more and more importance to and it's a critical problem to take measures to ensure the reliability of related trustworthy software such as secure operating systems (SOSs). Thereafter, it's always necessary for such systems to be taken complete and rigorous security test and evaluation among development team and/or by third-party security certification organization. However, such software testing is usually time consuming, cost consuming and boresome and thus technologies of software testing automation have alluring application foreground in that field. In this paper, methods and technologies about how to test a SOS automatically are discussed in breadth and in depth at first. Then least privilege is studied and the corresponding modules of security enhancement are added to Linux based on Linux Kernel Modules (LKM). Finally, a prototype of automatic security testing as to such least privilege mechanism is implemented and the results are analyzed.
목차
Abstract
1. Introduction
2. Automatization of security testing for secure operating systems
2.1. Extensions of security testing with varied automatic testing methods
2.2. Framework of whole automatic security testing platform for SOS
2.3.Modular design for system call testers
3. Security enhancement as to Linux based on least privilege
3.1. Least privilege mechanism
3.2. Architecture of the SOS prototype
3.3. Implementation of the SOS prototype
4. Automatic security testing of least privilege mechanisms
4.1. Analysis of testing target
4.2. Design and implementation of automatic security testing platform
4.3. Test and results
5. Summary
6. Acknowledgements
7. References
저자
간행물 정보
발행기관
-
- 발행기관명
- 보안공학연구지원센터(IJSIA) [Science & Engineering Research Support Center, Republic of Korea(IJSIA)]
- 설립연도
- 2006
- 분야
- 공학>컴퓨터학
- 소개
- 1. 보안공학에 대한 각종 조사 및 연구 2. 보안공학에 대한 응용기술 연구 및 발표 3. 보안공학에 관한 각종 학술 발표회 및 전시회 개최 4. 보안공학 기술의 상호 협조 및 정보교환 5. 보안공학에 관한 표준화 사업 및 규격의 제정 6. 보안공학에 관한 산학연 협동의 증진 7. 국제적 학술 교류 및 기술 협력 8. 보안공학에 관한 논문지 발간 9. 기타 본 회 목적 달성에 필요한 사업
간행물
-
- 간행물명
- International Journal of Security and Its Applications
- 간기
- 격월간
- pISSN
- 1738-9976
- 수록기간
- 2008~2016
- 등재여부
- SCOPUS
- 십진분류
- KDC 505 DDC 605
이 권호 내 다른 논문 / International Journal of Security and Its Applications Vol.2 No.3
피인용수 : 0건 (자료제공 : 네이버학술정보)
함께 이용한 논문 이 논문을 다운로드한 분들이 이용한 다른 논문입니다.
0개의 논문이 장바구니에 담겼습니다.