CAJ | 학술논문

Linux作为开源操作系统，被广泛应用于各个领域。针对Linux操作系统的安全问题，特别是Linux操作系统把“一切皆当做文件”，提出了结合可信计算技术，通过Linux安全模块( LSM)机制，基于Linux的系统调用过程，使用钩子函数完成对文件保护的方法。该文件保护机制建立在信任链之上，保证了被保护文件的可信性和完整性，并且具有动态恢复和审计功能。该文件保护机制的设计与实现，证明了该方法的可行性和实用性。
Linux작위개원조작계통，피엄범응용우각개영역。침대Linux조작계통적안전문제，특별시Linux조작계통파“일절개당주문건”，제출료결합가신계산기술，통과Linux안전모괴( LSM)궤제，기우Linux적계통조용과정，사용구자함수완성대문건보호적방법。해문건보호궤제건립재신임련지상，보증료피보호문건적가신성화완정성，병차구유동태회복화심계공능。해문건보호궤제적설계여실현，증명료해방법적가행성화실용성。
As an opensource operating system, Linux is widely applied in various fields. For the security issue, especially everything is a file for Linux, this paper designed a method protecting file, which used the hooks of Linux Security Module ( LSM) intercepting system calls, combined with trusted computing. The design protects the credibility and integrity of file, based on trust chain, and has a dynamic recovery and audit functions. The design and implementation of mechanism demonstrate the feasibility and practicality.