Research On UltraKernel-based Network Security System Model And Security Techniques

This thesis proposes a new computer system architecture model, which we called LOIS model, for network security system to promote performance and security of its own. This model uses a vertical structure rather than the hierarchical structure using in ordinary operate systems. This model does not treat hardwares as resources but manage the hardware as well as application software. It can reduce costs and increase efficiency and security. The LOIS system model also makes it easy to take in security mechanisms protecting the system and improving the survivebility against attacks.The main thrusts of this thesis are:(1) an ultrakernel network security system model.Hardware is managed as well as software and the kernel only has a very small soft switch to manage all the application systems and exchange messages between them. System security and user data security are comprehensively considered in the model.(2) several security mechamisms suit for the ultrakernel.Several mechanisms are provided to assure the system security based on the ultrakernel. Separation, multilevel, hardware based access control and code error tolerance mechanisms are well integrated .(3) a developing platform and a firewall system prototype.A security system development platform has been implemented, which can be used to build ultrakernel system. A firewall system based on ultrakernel is also achieved by the platform. Tests shows that the performance of the ultrakernel system is very good.