安全操作系统中基于安全性损害分析的可信恢复

安全操作系统可能因为内部或外部的原因发生失效或中断，进而导致其安全性损害。本文首先描述了一个通用的安全模型，然后扩展此模型以描述安全操作系统中的安全性损害，并提出依据安全策略从安全审计日志中分析计算安全性损害的方法，最后给出了安全性损害相应的可信恢复算法。在消极的安全防御外，本文的研究主动保证安全操作系统的安全性，增强了安全操作系统的可靠性和可恢复性。

改进增强型高安全等级操作系统SECIMOS的设计与实现

本文介绍了以Linux系统为基础,通过改进/增强法来开发高安全等级操作系统SECIMOS,给出了系统的实现框架,全面论述了其中的核心技术,如访问控制、追责机制、保证方法等。分析了改进/增强法存在的问题,指出应探讨更适合今后开发最高安全等级操作系统的方法。

安全ARP的Clark-Wilson模型化

ARP协议漏洞严重威胁着TCP／IP的安全，一些基于对称或非对称密钥机制的安全ARP协议被相继提出。本文介绍了ARP协议攻击的原理和几个最出名的基于对称或非对称密钥机制的安全ARP协议，引入Clark-wilson商业模型对ARP的完整性状态进行了分析，把改进协议Clark-Wilson模型化，在模型化的过程中找到了它们不能通过Clark-Wilson商业模型验证规则的关键点，并根据Clark-Wilson商业模型提出的经典场景，给出了相应的攻击场景。

使用CC标准开发的高保证安全信息系统

通用标准（Common Criteria）提供了衡量系统安全性的流行准则。本文主要提出通过各类保证措施，如何构建符合CC标准的高保证安全信息系统。文中首先给出了CC的评估模型、评估过程和安全保证的具体要求。然后以开发安全审计系统为例，分析了系统安全功能和保证要求的产生、审计系统的实现框架以及为达到标准要求而在系统开发过程中使用的各种保证证据和保证措施。最后，又分析了审计系统对整个系统的性能影响因素，并提出了改进办法。本文通过深入剖析通用标准中各个保证要求的内涵，为开发具有高保证要求的信息系统提供了理论指导和实现方法。

一种基于访问控制的安全Web服务发现机制

当前的Web服务发现机制大多依赖集中式的统一描述、发现和集成注册中心,但组织机构出于安全和地域的考虑,倾向于构建私有的分布式注册中心,只有注册且可信的请求者才能浏览到他们有权限访问的服务信息。该文给出Web服务发现阶段基于角色的访问控制模型RBAC4WSD,发现代理依照服务提供者指定的安全策略对请求者实施访问控制,并以跨国公司内部的文档服务为例介绍原型系统的实现。

安全实时数据库隐蔽信道度量和处理技术研究

军事和经济等关键领域的数据应用需要安全实时数据库（SRTDB）提供安全和实时保障，但是隐蔽信道严重威胁着安全实时数据库的表现。如何有效地限制隐蔽信道威胁，同时保障系统的实时性能，是这类数据库迫切需要解决的问题。本文从信道限制、信道容量度量、多种度量指标结合以及信道检测四个方面入手，对安全实时数据库中数据冲突信道（DC信道）度量和处理领域出现的若干关键问题展开研究，取得了以下四个方面的主要成果： 第一，已有的SRTDB系统DC信道处理方法中，基于相对安全目标的信道限制方法能够支持安全和实时需求的均衡，比基于绝对安全目标的消除方法更灵活。在信道限制方法中，基于概率的限制方法降低了满足安全标准时信道限制操作所附加的实时性能损失，但是仍然存在实时性能的额外浪费。针对这一不足，提出了基于多概率的信道限制策略（MPBPSP），能够根据系统安全标准针对每个信道实例施加适当干扰，进一步减少了实时性能的损失。 第二，信道威胁的准确度量是对信道施加适当限制的基础。依据安全评测标准要求，提出了一种使用容量指标的DC信道威胁限制方法（CUCCMM）。该方法克服了已有信道容量限制方法在信道模型描述和度量指标上的缺陷，采用Z信道模型描述MPBPSP方法下DC信道的传输特性，并选择时间单位的容量指标。方法中以定理形式分别给出了干扰下信道容量度量算法，以及根据容量限制标准计算限制措施参数的算法。基于CUCCMM，系统能够准确地实施信道容量限制标准，并对限制下信道的实际容量进行监测。 第三，多种因素共同决定着信道威胁的程度，这些因素对应的度量指标也各有偏重，只有结合多种指标才能全面的度量和限制信道威胁。提出了综合多个指标的DC信道威胁度量和限制方法CMMA，它结合容量和短消息指标度量信道传输能力，并利用消息价值概念在短消息指标中同时包含被传输数据的长度和敏感度属性。实验证明，利用MPBPSP策略，CMMA方法能够同时对信道传输长文件和传输短消息这两方面能力施加限制，并且方法中多个指标的运用并不会带来实时性能损失的成倍增长。 第四，为了威慑入侵者并为限制信道威胁提供准确的依据，需要对信道的实际使用进行审计和检测。提出了对事务冲突信息的审计标准，并且按照用户和数据两种单位划分审计记录，有效地防止入侵者通过分散冲突记录的方式逃避检测。提出了一种基于冲突间隔时间的信道检测方法CTIBDA，方法中将冲突间隔时间的规律性作为检测的依据，并结合两种规律性指标提高了检测方法的健壮性。由于检测方法中没有复杂的学习和运算过程，因此方法还具有实施代价低的优点。

小麦—偏凸山羊草6Mv/6B代换系的研究

小麦条锈病（Puccinia striiformis f. sp. tritici）是世界性小麦病害，可导致受害小麦减产30%以上，甚至绝收。小麦条锈病在我国西南、华北麦区危害严重，四川麦区是小麦条锈病发病最重的地区之一，每年因条锈病流行造成小麦产量损失巨大。利用抗条锈病品种是控制该病害最安全、经济的有效途径，因此挖掘利用抗病新基因，开展抗病遗传基础研究是当前育种工作中面临的重要任务。 偏凸山羊草（Aegilops ventricosa，DDMvMv，2n=28）是一年生草本植物，起源于地中海西部沿岸地区，具有对小麦白粉病、锈病等高抗或免疫、耐盐、抗寒、蛋白质含量高等优良性状，是小麦遗传育种很好的种质资源。本研究以高抗条锈病的小麦—偏凸山羊草6Mv/6B代换系（Moisson 6Mv/6B）为材料，对其含有的带条锈病抗性基因的偏凸山羊草6Mv染色体在四川小麦背景中的传递情况、与小麦—簇毛麦双端体附加系所具有的白粉病抗性的聚合以及对Moisson 6Mv/6B进行电离辐射诱变筛选抗条锈病的小麦—偏凸山羊草易位系三个方面进行了研究。取得的主要研究结果如下： 1. Moisson 6Mv/6B与高感条锈病的四川地区普通小麦品种绵阳26、绵阳93-124和SW3243的杂种F1与其普通小麦亲本分别作为父、母本回交，通过对其BC1和F2的结实率、根尖细胞有丝分裂中期染色体的观察以及对条锈病抗性的鉴定，发现含6Mv染色体的F1植株作母本时的回交结实率（83.10%）普遍高于含6Mv染色体的F1植株作父本（48.61%），结实率与普通小麦基因型密切相关（χ2=34.15>>χ20.05=5.99（df=2））；6Mv染色体在三种四川小麦中通过雌、雄配子传递的传递方式与其传递率间没有显著相关性，其传递率与普通小麦基因型呈显著相关性（χ2=6.42>χ20.05=5.99（df=2））。 2. Moisson 6Mv/6B与高抗白粉病的小麦—簇毛麦双端体附加系Pana（2n=42+2t）正反杂交，希望在聚合两者抗性的同时观察不同受体背景下的抗性反应。对Moisson 6Mv/6B和Pana正反杂交的结实率、杂交后代的农艺性状进行观察，并对杂交后代进行基因组荧光原位杂交（GISH）分析及条锈病和白粉病的抗性鉴定。结果表明Moisson 6Mv/6B作母本时杂交结实率（80.56%）高于Pana作母本时（58.33%），结实率与杂交方式间紧密相关（χ2=4.96>χ20.05=3.84（df=1））；Moisson 6Mv/6B和Pana杂交后代株高比最高亲本高约10cm，成熟期也较两亲本提前两个星期左右；正反杂交后代中具有偏凸山羊草6Mv染色体的植株具有条锈病抗性，具有簇毛麦端体的植株具有白粉病抗性，同时筛选到4株含有偏凸山羊草和簇毛麦遗传物质并对条锈病和白粉病兼抗的材料，证明来自偏凸山羊草6Mv染色体的条锈病抗性与来自簇毛麦端体的白粉病抗性已经聚合在一起，且没有产生相互抑制的作用，暗示通过这两个抗性基因的聚合是完全能获得兼抗条锈病和白粉病的小麦新种质。 3. 对Moisson 6Mv/6B在减数分裂时期的成株进行总剂量为6Gy、辐射频率为120rad/min的60Co-γ射线辐射，对辐射植株自交后代进行农艺性状及根尖细胞有丝分裂中期染色体形态观察和条锈病抗性鉴定。结果为辐射植株自交结实率为2.22%，根尖细胞有丝分裂中期的染色体存在明显碎片，辐射自交后代植株对条锈病具有成株期抗性。 小麦—偏凸山羊草6Mv/6B代换系对条锈病抗性稳定，是培育条锈病抗性品种的良好供体。本研究证明在四川小麦背景中要利用该品种抗性，在结实数满足需要时，可将其作父本，亦可作母本，但关键是要选择好一个优良的受体基因型；同时其条锈病抗性与来自簇毛麦的白粉病抗性没有相互抑制作用，可将两者抗性有效聚合用于小麦育种中。 Wheat stripe rust (Puccinia striiformis f. sp. Tritici) is a worldwide disease of wheat, and could lead to victims of 30 percent or even total destruction of wheat production. Wheat stripe rust harms badly in China's southwest and North China. Sichuan province is one of the regions damaged by wheat stripe rust heavily. The use of resistant varieties is the most secure and economical way to control the wheat stripe rust. Therefore, it is essential to identify new disease-resistant genes and genetically research of disease resistance. Aegilops ventricosa (DDMvMv, 2n = 28) is an annual herbaceous plant, originating in the coastal areas of the western Mediterranean, with good characters such as resistance of wheat powdery, rust, salt, cold and high protein content. It is a good germplasm resource. In this study, the wheat- Aegilops ventricosa 6Mv/6B substitution line Moisson 6Mv/6B (highly resistant to the wheat stripe rust) was used to study on the transmission of chromosome 6Mv of Aegilops ventricosa in different genetic background of Sichuan wheat varieties, hybridization with wheat- Haynaldia villosa ditelosomic addition line Pana (highly resistant to the powdery mildew) and screening of wheat- Aegilops ventricosa translocation line by exposuring Moisson 6Mv/6B under ionizing radiation. The main results are as following: 1. Moisson 6Mv/6B was crossed with Sichuan wheat varieties mianyang26, mianyang93-124 and SW3243 (highly susceptible to stripe rust), respectively. Their F1 hybrids were further backcrossed as male and female to corresponding wheat varieties. The seed-setting rate, chromosomes confirmation in the mitotic metaphase of root tip cells, and resistance to stripe rust of the subsequent BC1 and F2 plants were investigated. The average seed-setting rate of backcross via 6Mv as female donor (83.10%) was higher than that of backcross via 6Mv as male donor (48.61%), suggesting that the seed-setting rate was associated with the wheat genotypes（χ2=34.15>>χ20.05=5.99（df=2））. In all analyzed populations, transmission frequencies of chromosome 6Mv were not correlated with the ways of 6Mv through male or through female. However, transmission frequencies of chromosome 6Mv were significantly correlated with Sichuan wheat genotypes（χ2=6.42>χ20.05=5.99（df=2））. 2. To aggregating the resistances to stripe rust and powdery mildew, as well as research on the resistance reactions in different genetic background, Moisson 6Mv/6B was reciprocally hybrided with the wheat- Haynaldia villosa ditelosomic addition line Pana (highly resistant to the powdery mildew). The seed-setting rate, agronomic characters, genomic in situ hybridization (GISH) of hybrid progenies，and resistances to stripe rust and powdery mildew were investigated. The results showed that the seed-setting rate of hybridization via Moisson 6Mv/6B as female donor (80.56%) was significant higher than that via Pana as female donor (58.33%). The seed-setting rate was associated with the hybrid methods (χ2 = 4.96> χ20.05 = 3.84 (df = 1)). The plant height of hybrid progenies was about 10 cm higher than Pana, the parent with maximum height. And the maturity of hybrid progenies was about two weeks earlier than that of the parents. In the hybrid progenies, the plants with the 6Mv chromosome have the resistance to stripe rust and the plants with the telosome from Haynaldia villosa have the resistance to powdery mildew. It was found that four plants with both the 6Mv chromosome and the telosome from Haynaldia villosa were resistant to stripe rust and powdery mildew. It indicated that the resistance to stripe rust and powdery mildew aggregated, and no mutual inhibition was found. It implied that the aggregation of the two resistance genes was able to provide the new wheat germplasm with the resistances to stripe rust and powdery mildew. 3. Moisson 6Mv/6B was irradiated with 60Co-γ rays of 6Gy (120rad/min) during meiosis. The agronomic characters and chromosomes confirmation in the mitotic metaphase of root tip cells，as well as resistance to stripe rust were investigated. The seed-setting rate of irradiated plants was only 2.22%. The chromosomes in mitotic metaphase had clear fragments. The resistance to stripe rust of progeny of irradiated plants was the adult-plant resistance. The wheat- Aegilops ventricosa 6Mv/6B substitution line is a good stripe rust resistance donor for its stabile resistance. Our study demonstrated that the key for use the resistance is to choose a good receptor. There is no difference between Moisson 6Mv/6B be the female and be the male if the seed number meets the requirement. At the same time, the stripe rust resistance of Moisson 6Mv/6B did not have the mutual inhibition with the powdery mildew resistance from Haynaldia villosa. It is able to aggregate the two resistances for wheat breeding.

功能菌强化应急处理苯胺突发污染事故研究

近年来各种环境污染事故频发，据统计仅2001~2003年间，发生的各类环境污染事故就高达5606次，其中水污染事故3235次，占全部的57.7%。这些事故不仅给人民生命财产造成巨大损失，也给生态环境造成严重的破坏。因此开发安全高效的应急处理技术迫在眉睫。本研究以筛选高效苯胺降解菌为基础，通过对高效菌降解性能的研究指导将高效菌作为功能郡主投加到已有生物处理系统强化应急处理苯胺突发污染事故废液，取得了良好的效果。 苯胺高效降解菌AN-P1为红球菌（Rhodococcus sp.），其通过间位途径降解苯胺，AN-P1利用苯胺生长和降解的最佳pH为6，最适浓度为2000 mg/L，最适温度为30 ℃，最佳接种量为0.3‰。AN-P1降解含500 mg/L、1000 mg/L、2000 mg/L苯胺的培养物分别经过28 h、24 h、32 h降解，出水苯胺含量能达到《污水综合排放标准》（GB8978-1996）一级标准。但由于苯胺降解过程中释放了大量氨氮，出水氨氮仍较高未能达标排放。而常规SBR系统应急处理效果较差，苯胺和COD去除率均低于10%，出水未能达标排放。活性碳吸附后的回收和后续处理也会带来操作不变和二次污染问题，且处理后出水往往难于达标排放，尚需进行进一步处理。 生物处理系统应急处理后恢复运行处理效果监测和PCR-DGGE图谱分析显示，用AN-P1菌强化应急处理系统后不仅能快速高效的去除苯胺，而且可以有效保障处理系统对污染物的净化性能，有效的保护系统中的功能微生物免受苯胺毒害。 研究结果表明，从实际处理效果、对原有生物系统性能保护及实际应用操作等多方面考虑，用AN-P1菌强化应急处理苯胺突发污染事故在技术上都是可行的。本研究为应急处理苯胺突然污染事故废液提供了新的方法。 Recent years, environment pollution accidents happened frequently, the data showed that there are 5606 accidents between 2001 and 2003, including 3235 water environment accidents, which is 57.7% of all. These accedents not only caused money lost and life lost but also caused serious damage to the ecologicl environment. So exploring highly-effective and secure methods to solve these accidents is an urgent mission. We screened a highly-effective aniline-degrading bacterium and did some researches on its ability to degrade aniline, in order to guide the emergency treatment of aniline containing wastewater that caused by sudden accident pollution with bioaugmentation. A highly-effective aniline-degrading bacterium AN-P1 was isolate and characterized as Rhodococcus sp. It degrades aniline through meta-cleavage pathway. The optimal pH and temperature for cell growth and aniline degradation were 6 and 30 ℃, respectively, and the opitimal concentration of aniline was 2000 mg/L, the optimal inoculation amount was 0.3‰.It took bacterium AN-P1 only 18 h, 24 h and 32 h, respectively, for the treatment of MSB containing 500 mg/L, 1000 mg/L, 2000 mg/L aniline to meet the first grade of national some of the NH4+-N which caused by aniline degradation. It took bacterium AN-P1 only 10 h, 20 h and 32 h, respectively, for the treatment of wastewater containing 500 mg/L, 1000 mg/L, 2000 mg/L aniline to meet the first grade of national integrated wastewater discharge standard. The bacterium AN-P1 can also remove some of the NH4+-N which caused by aniline degradation. It took bacterium AN-P1 only 10 h, 20 h and 32 h, respectively, for the treatment of wastewater containing 500 mg/L, 1000 mg/L, 2000 mg/L aniline to meet the first grade of national integrated wastewater discharge standard. By combing AN-P1 with regular SBR system, it took only 36 h for the emergency treatment of wastewater containing 2000 mg/L aniline under simulating engineering conditions to meet the discharge standard. While the NH4+-N of effluent can not meet the standard because of the high amount NH4+-N caused by aniline degradation. The regular SBR system was not good at aniline and COD removal. The removal efficiency of which are less than 10%. It cost 67.8 g activated carbon to absorbed 1000 mg aniline. It is inconvenient to transport and use it for the emergency treatment of aniline when the sudden pollution accident happened. Meanwhile, it was complex ad hard to recycle the activated carbon and treat the aniline wastewater get from activated carbon recycling too. Hard to meet the effluent standard was also a problem of activated carbon absorption method. According to the PCR-DGGE profile and removal efficiency of pollutants and COD when the systerm recover from emergency treatment, AN-P1 can efficiently protect the microbial community of regular activated sludge system against the aniline. It proved that combing AN-P1 with regular biological system is a feasible strategy for emergency treatment of aniline sudden pollution accident. The research offered a new way for emergency treatment of aniline sudden pollution accident.

an analysis for understanding software security requirement methodologies

IEEE Reliabil Soc, Shanghai Jiao Tong Univ

separation of duty in trust-based collaboration

Chinese Assoc Cryptol Res, State Key Lab Informat Secur, Inst Software, Grad Univ Chinese Acad Sci, Natl Nat Sci Fdn China

一种高速安全反向代理服务器的设计与实现

安全反向代理服务器架设在真实网页服务器与用户浏览器之间靠近真实服务器的一侧,通过传输层安全协议保障用户与真实服务器之间的通信.作为基于传输层安全协议的虚拟专用网服务器的一个最重要的组成部分,安全反向代理有着极大的商业价值和技术含量.在FreeBSD-6.3的基础上设计并实现了一个与传统TCP/IP并行的TCP/IP跳转表.基于TCP/IP跳转表设计并实现了一种多加速卡调度算法.设计并实现了直接从加速卡队列获取数据包的代理转发协议栈.设计并实现了基于后台真实服务器反馈的负载均衡算法.测试表明,由这些算法和协议栈组成的高速安全反向代理服务器新进连接数达到了国内领先水平.

一种基于安全状态转移的简并测试集生成方法

在总结前人工作的基础上,结合安全操作系统对测试的特殊需求,提出了简并测试集(degenerate test set,简称DTS)的概念,设计了一种使用模型检测的基于安全状态转移的高效测试集生成方法.该方法以状态转移为化简对象,在利用模型检测技术生成测试用例的同时,归并相同的状态转移并化简需求集中的冗余属性,从而最终达到化简测试集的目的.在此基础上,探讨了单个用例失败时用例集的有效性问题,并对DTS生成算法进行了改进.实验结果表明,该方法可以有效地对测试集中的冗余进行化简.

月球机器人仿真中一种消除轮地交互误差的方法

利用虚拟现实技术虚拟出月球机器人在月面上的作业环境和作业过程,是提高机器人作业的安全系数和工作效率的一条有效途径。在3D重建得到的虚拟月面环境中,如果采用通常的单纯基于运动学(或者动力学)模型的仿真方法,对机器人的作业和运动进行虚拟,那么机器人与地形交互的过程中容易产生接触偏差。而且,随着仿真时间的推进,这种接触偏差会逐渐积累并不断增大,进而严重影响仿真测试的精度和效果。为了消除月球机器人仿真中的轮地交互误差,在分析误差来源的基础上,提出了基于运动学优化的解决方法。最后利用实际的虚拟现实仿真系统,验证了所提出方法的有效性。

用Windows 2000构建企业网的安全体系

阐述了一种用Ｗｉｎｄｏｗｓ２０００构建企业Ｉｎｔｒａｎｅｔ的原理，并给出了一个应用实例，该方法适合中小企业以较高性价比，比较低的使用、维护费用通过公共网建立ＶＰＮ，并能安全地与Ｉｎｔｅｒｎｅｔ相连接，是一种切实可行的方案．