通用型安全操作系统处理方案浅析【 摘 要 】 在信息安全领域，伴随攻击技术不停升级和数据泄露事件激增，业界越来越重视服务器操作系统安全问题。文章从等级保护安全操作系统讨论入手，介绍了两种安全操作系统处理方案，对比了通用型安全操作系统相比传统自主研发安全操作系统优势所在。文中关键叙述了通用型安全操作系统处理方案技术优势和实现原理，结合增强型 dte、rbac、blp 三种访问控制安全模型，重构操作系统安全子系统（ssoos），动态、透明提升操作系统安全等级，以实现通用型安全操作系统处理方案。【 关键词 】 安全操作系统；操作系统安全子系统(ssoos)；等级保护【 abstract 】 with the continuous upgrade of attack technologies and the sharp rise in the data disclosure events, the people in the information security industry attach greater importance to the security problems of server operating system. starting with the research on the classified protection security operating system, this article introduced the solutions of two kinds of security operating systems and analyzed the advantages of the general purpose security operating system over the traditional independently developed security operating system. in this article, we give full priority to represent the technical advantages of general purpose security operating system solution and the principles for achieving such solution. in combination with three enhanced type access control security models, namely dte, rbac and blp, we reconstructed the security subsystem of operating system (ssoos) and promote the security class of operating system in dynamic and transparent manner, so as to achieve the solution of general-purpose security operating system.【 keywords 】 security operating system；security subsystem of operating system（ssoos）；classification protection0 引言伴随网络安全威胁日益严重，用户对信息安全建设越来越重视。而现阶段安全威胁不仅种类越发丰富，攻击形式也日趋多...
