Trusted third-party software building method

Abstract

The invention belongs to the technical field of information security and trusted computing, and relates to a trusted third-party software building method. The method includes: generating trusted software strategy grammar semantics based on an XACML language according to security requirements of trusted software building; a user generating a trusted software strategy library of third-party software according to the trusted software strategy grammar semantics provided by the method and referring to parameter expansion strategies and provided and self-defined strategies by software developers; using trusted software generation tools to automatically build trusted software. The trusted third-party software building method is high in flexibility; fine-grained software behaviors can be monitored, monitoring codes can be generated through the trusted software strategies, and effective control over the software behaviors is realized. Monitoring requirements of the users are described through the trusted software strategies on the bases of the XACML language, and good universality and expandability are achieved; the monitoring codes are automatically generated on the basis of the trusted software strategies, and influence of the users on security of the third-party software is enhanced.

Description

technical field [0001] The invention belongs to the technical field of information security and trusted computing, and in particular relates to a third-party software trusted construction method. Background technique [0002] With the rapid development of computing resources, users are increasingly dependent on software, and the expression of their large computing needs is usually realized through various software. However, at this stage, it is difficult to guarantee the security of third-party software that provides assistance to users. It is not uncommon for users to experience system exceptions and personal data leakage in the process of using these software, which makes users unable to fully trust the services provided by third-party software. [0003] Trusted software construction refers to building software that conforms to predetermined security policies by adding security modules inside or outside the software. It is an important means to improve software credibilit...

AI Technical Summary

Problems solved by technology

Existing methods only obtain information such as the user who uses the software, the operating system, and basic software access control (such as user name, operating system version number, software usage rights, etc.), and cannot implement finer-grained software access control during the running of the software. Specific Behavior Monitoring

[0006] (3) The monitoring method is unreliable

Since users lack a way to monitor third-party software in real time, users cannot trust that software developers' software can meet their security needs; existing monitoring methods cannot prove the authenticity of monitored behavior information, resulting in software credibility that cannot be guaranteed

Images