基于SDT安全访问控制的方法

Abstract

Abstract:

The rapid development of network offers a wide range of channels for information acquisition,which brings a serious potential security danger at the same time.this paper puts forward a method of access control based on SDT,by which the incredible binary code is executed separately through software dynamic translation.In the dynamic fragment execution,SDT is responsible for adding the security polices to the executable code,and controls the access of system resources by security polices.This method is implemented by the strata(SDT common platform).

Key words: SDT;access control;Strata;code execution isolation;information security

CLC Number:

TP393.08

ZHAO Yuan, WANG Huai-Jun, FANG Ding-Yi, TANG Zhan-Yong. Research on Security Access Control Based on SDT[J]., 2011, 24(11): 96-.

References

［1］周勇林.重大网络安全事件揭示应用软件安全重要性［J］.计算机工程与应用,2009(7):76.

［2］KEVIN S,JACK W D.Software security using software dynamic translation［C］.The 2003 USENIX Annual Technical Conference,2003:21-34.

［3］GIUSEPPE D,DENIZ H,MADAN J,et al.Avinash lakshman dynamo:amazons highly available key-value store［C］.New York,NY,USA:ACM2007:1-12.

［5］HU Wei,JASON H,DAN W,et al.Secure and practical defense against code-injection attacks using software dynamic translation［J］.SIGARCH Computer Architecture News,2005(1):108-117.

［6］潘丽君,姜玲燕.跳转链接技术在动态二进制翻译中的应用［J］.微型电脑应用,2009(6):1-3.

［7］王楠,单征,岳峰,等.I386到Alpha动态二进制翻译中的代码缓存管理优化［J］.信息工程大学学报,2010(6):1-4.

［8］JACK DAVIDSON.Software security via lightweight process virtualization［C］.In Workshop on Exploring the Trace Space,International Conference on Supercomputing,2003:1-13.

［9］BRUCE C,JACK D,MARY L S.Continuous compilation:a new approach to aggressive and adaptive code transformation［J］.ACM Transactions on Information System Security,2005(11):3-40.

［10］SRIDHAR S,SHAPIRO J S,BUNGALE P P.Hdtrans:Alow-overhead dynamic translator［C］.In Proceedings of the 2005 Workshop on Binary Instrumentation and Applications(September 2005),IEEE Computer Society,2005:1-10.

［11］JASON D H,DANIEL W,BRUCE R C,et al.Evaluating fragment construction policies for sdt systems［C］.VEE′06,2006:1-10.

［12］ZHOU S,CHILDERS B R,SOFFA M L.Planning for code buffer management in distributed virtual execution environments［C］.New York,NY,USA:In VEE′05:Proceedings of the 1st ACM/USENIX International Conference on Virtual Execution Environments,2005:100-109.

［13］SCOTT K,KUMAR N,VELUSWAMY S,et al.Reconfigurable and retargetable software dynamic translation［C］.First Annual IEEE/ACM International Symposium,2003:1-15.

[1]	MA Wen, ZHU Zhixiang, WU Chen, WAN Yi. Research on the FP-Growth Algorithm-Based Security Log Analysis System [J]. , 2016, 29(9): 94-.
[2]	HE Shaofang. Anonymous Traitor Tracing Scheme Based on EIGamal Encryption Algorithm [J]. , 2016, 29(6): 44-.
[3]	XU Didi. Optimal Defense Strategy Against Rational Attackers [J]. , 2016, 29(5): 79-.
[4]	FU Zhe, LI Qing-Xia, WANG Huan-Huan. An Improved Bidirectional Authentication and Dynamic Password [J]. , 2014, 27(1): 150-.
[5]	YAO Shu-Guang. A Trusted Network Information Security Technology for the E-commerce Platform [J]. , 2014, 27(1): 153-.
[6]	MA Wen-Jun, CHEN Dan. Error Learning Encryption Algorithm Based on GPU [J]. , 2013, 26(4): 93-.
[7]	LI Jibiao,CEN Junjie. Research on the Effect of Learning Mode in Teaching Based on the Network of Collaborative [J]. , 2013, 26(1): 150-.
[8]	WANG Wei, LIU Bai-Hua, MENG Fan-Qing. Computer Network Security Issues and Prevention Ways [J]. , 2012, 25(4): 122-.
[9]	MEI Jian, HUANG Yong-Liang, CHEN Cong, MAO Wei. Signature Verification System Based on Writing Pressure [J]. , 2011, 24(9): 136-.
[10]	CHEN Juan, MA Tao. The Study of the Wireless Network Attack Classification Technology [J]. , 2011, 24(3): 118-.
[11]	ZHANG Ying. Design of Alarm Agent for Network Fault Management [J]. , 2011, 24(2): 119-.
[12]	PAN Xiao-Yong, ZHANG Lei, FAN Xue-Hui. Enhancing RFID-System Communication's Security by Digital Certificates [J]. , 2010, 23(11): 123-124.
[13]	ZHU Yan. Theoretical Analysis of Packet Filtering Transmission of the Firewall Netfilter in Linux Network [J]. , 2010, 23(5): 94-.

Research on Security Access Control Based on SDT

PDF (PC)

Like

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 13

Metrics

Comments

Recommended 0