高级检索

    安全关键实时操作系统时间隔离保护机制的设计与实现

    Design and Realization of Safety Critical Real Time Operating System Based on Temporal Isolation Safeguard Mechanisms

    • 摘要: 为了设计高可信的安全关键实时操作系统CRTOS 2 0 ,在分析现有操作系统可信性保障机制的基础上 ,提出了基于时空隔离保护机制构建安全关键实时操作系统的新思想 空间隔离保护的目的是防止不同地址空间内的程序无意或恶意越界进行非法读写 ,而时间隔离保护的目的则是为了防止某程序长期独占或超时使用处理器而阻止或延迟其他程序的运行 为实现时间隔离保护机制 ,在改进传统处理器能力预留机制的基础上 ,基于两级调度的思想 ,提出了新的实现方法 时空隔离保护机制的提出 ,可从本质上增强安全关键实时操作系统的可信性

       

      Abstract: To design highly dependable safety critical real time operating system CRTOS 2.0,the status quo of dependability safeguard mechanisms of existing operating systems is firstly analyzed. Since safety critical systems requires that both temporal and spatial isolation safeguard among different processes be maintained,a novel approach for designing CRTOS 2.0 is put forward,which is based on temporal and spatial isolation safeguard mechanism. The spatial isolation safeguard mechanism uses hardware memory protection to isolate and protect kernel itself and user tasks from incorrect operation caused by accidental errors or malicious tampering,and the memory protection provides support for multiple protected virtual address spaces designed for worst-case performance. However,the purpose of temporal isolation safeguard mechanism is to prevent an application from overrunning its allocated quota of resource usage and delay the progress of other integrated application tasks. In order to realize temporal isolation safeguard mechanism,the traditional approach based on processor capacity reservation is improved,and a novel implementation approach based on two-level hierachical scheduling approach is brought forward and discussed in detail. The dependability of CRTOS 2.0 is enhanced with temporal and spatial isolation safeguard mechanisms.

       

    /

    返回文章
    返回