Design For Distributed File System Of Security Polices

As we all know, security is the field of information technology today is a very important research direction. According to the classification of the computer system, computer security can be divided into hardware security and software security, which can be divided into application-level software security, database security, operating system security and network-level security. The operating system is to manage the entire computer hardware and software resources, direct and underlying hardware interaction and provide users with the necessary programming system call interface software. All applications including database systems, network operating system software is built on the basis of interfaces which are provided by the operating system to complete their task. Therefore, we can say the operating system's security is the basis of computer system security, there is no operating system security, no security, and application-level security of the host system, database security, and network-level security.Distributed parallel file system DPFS(Distributed Parallel File System) is a 8010 University of Electronic Science and Technology in 2002, successfully developed a distributed file system, which is based on the Linux environment for distributed parallel server design and development of data storage management system for intelligently managing files in distributed parallel server resources, is one of distributed parallel operating system's core components. In this thesis, a parallel distributed file system security SECDPFS(Security of DPFS) is based on DPFS security module, which uses the improved / developed principles of law(that is based on Linux security framework and DPFS on security policy-oriented analysis), added security and maintain a DPFS original interface does make SECDPFS with the best security / development expense ratio. The main function is to DPFS SECDPFS provide secure access mechanisms, including mandatory access control(MAC) and a complete access control and role-based use to achieve user access control mechanism(RBAC) and the type of award(Type Enforcement) mechanism Least Privilege in principle.This thesis first DPFS file system made a comprehensive presentation, on this basis discusses several typical system security policy model, a distributed parallel file system DPFS security framework and system to achieve the overall logical structure. Followed by detailed description of the design and implementation of security policy database synchronization modules, and the context for secure synchronization module detailed design scheme where research DPFS security framework and two detailed design and algorithm and synchronization module is this study focus. Finally, the future development of distributed parallel file system security are briefly discussed.