国防科技大学学报

引用本文:	何鸿君,曹四化,褚祖高,等.一种改进的事件驱动系统框架.[J].国防科技大学学报,2008,30(3):70-75.[点击复制]
	HE Hongjun,CAO Sihua,CHU Zugao,et al.An Improved Event-driven System Infrastructure[J].Journal of National University of Defense Technology,2008,30(3):70-75[点击复制]

【打印本页】【在线阅读全文】【下载PDF全文】【查看/发表评论】【下载PDF阅读器】【关闭】

←前一篇|后一篇→

过刊浏览高级检索

本文已被：浏览 6544次下载 5942次

一种改进的事件驱动系统框架

何鸿君¹, 曹四化^1,2, 褚祖高², 罗莉¹, 宁京宣¹, 董黎明¹, 李朋¹

(1.国防科技大学计算机学院，湖南长沙 410073;2.75200部队自动化站，广东惠州 516001)

摘要:

在给出事件驱动系统安全漏洞的基础上，指出了产生漏洞的根本原因是：系统忽视了输入系统的事件序列之间存在的相关性；系统无条件信任任何事件源产生的事件。针对这两个原因，相应提出了事件序列形式安全分析模型及基于事件源的可信度评估模型，依据这两个模型，构建了一种改进的事件驱动系统框架。

关键词: 信息安全事件驱动系统事件序列事件源可信度

DOI：

投稿日期：2007-11-06

基金项目:国家部委基金资助项目(9140C1102060707)

An Improved Event-driven System Infrastructure

HE Hongjun¹, CAO Sihua^1,2, CHU Zugao², LUO Li¹, NING Jingxuan¹, DONG Liming¹, LI Peng¹

(1.College of Computer, National Univ. of Defense Technology, Changsha 410073, China;2.Automation Station， No. 75200 Army Unit, Huizhou 516001, China)

Abstract:

Based on the presentation of the security vulnerability of the event-driven system, this paper points out the deep reasons for the vulnerability of system: (1) The system ignores the inherent correlation among events; (2) The system trusts events from any sources without condition. In view of these two reasons, this paper presents an analytical model for security of event sequence, and an evaluation model of trustworthiness based on event source. Furthermore, this paper constructs an improved event-driven system infrastructure based on the two models.

Keywords: information security event-driven system event sequence event source trustworthiness