Secure container and design method thereof

Abstract

The invention discloses a secure container and a design method thereof, belonging to the technical field of information safety. The secure container disclosed by the invention is characterized in that a secure area is constructed in an operation system; a set of processes is operated in the area by utilizing the three mechanisms including mandatory access control, resource isolation and trusted measurement; the set of processes is only capable of accessing resources in the area and is incapable of accessing resources outside the area; processes outside the area are also incapable of accessing resources in the area; and furthermore, the strategy of the area and application in the area need to be subjected to trusted measurement. Compared with the prior art, the secure container disclosed by the invention is capable of resisting various attacks in a network through the operation system level; therefore, the network information security problem is thoroughly solved; and the secure container and the design method thereof disclosed by the invention have good popularization and application value.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a security container and a design method thereof. Background technique [0002] With the development of the Internet, the network has spread to every corner of our life. The Internet and local area network have become an important part of our life, and the security problems of the network have been exposed. In order to ensure the security of the network, a lot of energy has been spent to establish a network security system, mainly including VPN, firewall, virus detection and other security systems. Today, the establishment of these security systems has played a great role, but these security systems still have not completely solved the problem of network information security. The security issue of the system was not paid attention to in the past, leaving many hidden dangers. For example: Although the user has installed an anti-virus, the PC will still be infected w...

AI Technical Summary

Problems solved by technology

Today, the establishment of these security systems has played a great role, but these security systems still have not completely solved the problem of network information security

The security issues of the system were not paid attention to in the past, leaving many hidden dangers

For example: Although the user has installed an anti-virus, the PC will still be infected with viruses, Trojan horses, and hackers

Images