Operating system security

Author: Jia Chunfu
Publisher: Wuhan University Press
Book Description:
This book is a textbook on operating system security, divided into seven chapters, and provides a comprehensive introduction to the theory and key technologies of operating system security. The main content includes: relevant concepts of operating system security (basic terms and concepts), security mechanisms of operating systems, security models of operating systems, security architecture of operating systems, security mechanisms and technologies of mainstream operating systems (UNIX/Linux and Windows), security evaluation of operating systems, and aspects of security design of operating systems.
The book is rich in content, easy to understand, distinctive in characteristics, and emphasizes the combination of theory and practical application, making it beneficial for students to better master the knowledge and related skills they have learned.
This book can be used as a textbook for senior undergraduate students in majors such as information security, computer science and technology, and communication engineering; it can also be used as a reference book for undergraduate and graduate students in related majors, as well as for technical personnel engaged in scientific research and engineering in related fields.
Table of Contents:
Chapter 1 Introduction
1.1 Security Threats Facing Operating Systems
1.1.1 Confidentiality Threats
1.1.2 Integrity Threats
1.1.3 Availability Threats
1.2 Development of Research on Secure Operating Systems
1.3 Basic Definitions and Terminology of Operating System Security
1.4 Basic Concepts of Operating System Security
1.4.1 Security Functions and Security Guarantees
1.4.2 Trusted Software and Untrusted Software
1.4.3 Subjects and Objects
1.4.4 Security Policies and Security Models
1.4.5 Reference Monitor
1.4.6 Secure Kernel
Chapter 1 Introduction
1.1 Security Threats Facing Operating Systems
1.1.1 Confidentiality Threats
1.1.2 Integrity Threats
1.1.3 Availability Threats
1.2 Development of Research on Secure Operating Systems
1.3 Basic Definitions and Terminology of Operating System Security
1.4 Basic Concepts of Operating System Security
1.4.1 Security Functions and Security Guarantees
1.4.2 Trusted Software and Untrusted Software
1.4.3 Subjects and Objects
1.4.4 Security Policies and Security Models
1.4.5 Reference Monitor
1.4.6 Secure Kernel
1.4.7 Trusted Computing Base
Chapter 2 Operating System Security Mechanisms
2.1 Identification and Authentication Mechanisms
2.1.1 Basic Concepts
2.1.2 Cryptography
2.1.3 Biometric Authentication Methods
2.1.4 Authentication Mechanisms Related to Identification
2.2 Access Control
2.2.1 Basic Concepts
2.2.2 Discretionary Access Control
2.2.3 Mandatory Access Control
2.2.4 Role-Based Access Control
2.3 Least Privilege Management
2.4 Trusted Path
2.5 Security Audit Mechanism
2.5.1 Audit Events
2.5.2 Implementation of Audit Systems
2.6 Storage Protection, Runtime Protection, and I/O Protection
2.6.1 Storage Protection
2.6.2 Runtime Protection
2.6.3 I/O Protection
2.7 Security Mechanisms of Mainstream Operating Systems
2.7.1 Security Mechanisms of the Linux Operating System
2.7.2 Security Mechanisms of the Windows 2000 Operating System
Chapter 3 Operating System Security Models
3.1 Concepts and Characteristics of Security Models
3.2 Development and Verification of Security Models
3.3 Classification of Security Models
3.3.1 Access Control Models
3.3.2 Information Flow Models
3.4 Main Security Models
3.4.1 Bell-LaPadula Model
3.4.2 Biba Model
3.4.3 Clark-Wilson Model
3.4.4 Chinese Wall Model
Chapter 4 Operating System Security Architecture
4.1 Overview
4.1.1 Concept of Security Architecture
4.1.2 Basic Principles of Security Architecture Design
4.2 Flask Architecture
4.2.1 Concept and Characteristics of the Flask Architecture
4.2.2 Composition of the Flask Architecture
4.2.3 Application of the Flask Architecture in Linux LSM
Chapter 5 Security Technologies of Mainstream Operating Systems
5.1 Linux/UNIX Security Technologies
5.1.1 Linux Authentication
5.1.2 Linux Access Control
5.1.3 Linux Network Service Security
5.1.4 Linux Backup/Recovery
5.1.5 Linux Logging System
5.1.6 Linux Kernel Security Technologies
5.1.7 Reference for Configuring Secure Linux Servers
5.2 Windows Security Technologies
5.2.1 Windows Authentication and Access Control
5.2.2 Windows Distributed Security Services
Chapter 6 Operating System Security Evaluation
Chapter 7 Design of Secure Operating Systems
Main References