The framework for security management based on CIM is presented in the paper,by a CIM modeling about secu- rity equipment and the realization of the prototype system,the technique about management framework is validated,and in con- junction with other management framework for comparative analysis.

Separate secure domain is the basic requirement for secure OS.

In the paper, a two-levels-cache mechanism is brought in the GFAC based on a three levels model of access, and is implemented in Redflag secure OS.

Providing complete security attributes revocation function in secure OS is required by both multi policy supporting mechanism and Common Criteria, but all the relevant research on this subject are imperfect.

The object types in the operating system,which were sorted into the static object and the dynamic object,were analyzed,and some deficiencies in accessing the object in the security operating system were pointed out.

The mechanism of buffer overflow from the point of view of security operating system is analyzed,buffer overflow with BLP model is formalized.

0/4 being the project background, this paper reports the research of covert channel analysis of security operating system.

The paper studies that in the teaching of operating system security,centered on Security reference monitor,how to organize the teaching content of trusted Computing Base,security mechanism,security model and secure evaluating organically to help student handle the basic concept and fundamental theory of the design and development of secure operating system systematically.

So researches on operating system security has always been the hot topic at home and aboard.

Research on Linux Anti-ELF Virus in Security OS;

A Dedicated Security OS Based Transparent Proxy Implemented In Kernel;