Research on architecture and implementation of application security supportive platform
Zhao Yong · Jisuanji gongcheng yu sheji · 2011
The typical security problems of application systems in classified protection work is analyzed,and then the application security supportive platform is designed.The platform is based on trusted computing technology and least privilege principle,divides resources in application environment into several parts mapping to specific processes,and then sets up trusted and untrusted domains,so that the influence of application system vulnerabilities could be confined and the information flow from different application systems could be iso-lated.The platform also utilizes the technology called application security encapsulation in system kernel to analyze and judge the infor-mation flow from application layer,so that the generalization security mechanism can be guaranteed and cannot be bypassed.