一种基于多核的完整性度量实施方法

为了解决在使用内核完整性度量机制对操作系统进行实时度量时，由于操作系统内核在设计之初没有考虑内核完整性度量机制的出现，导致不能对系统进行及时度量的问题，本研究提出一种基于多核的完整性度量实施方法，该方法通过在操作系统内核相关部分加入对内核完整性度量机制的支持来解决这一问题。本文首先介绍该方法的设计和实现，然后通过实验对该方法的有效性及性能开销进行分析。该方法可以为内核完整性度量机制分配核运行，实现对操作系统内核的及时度量，且性能开销极小。

A Multi-Cores-Based Approach to Integrity Measurement Enforcement

In order to solve the problem that when using the kernel integrity measurement mechanisms to measure the integrity of the operating system in real-time,because the kernel integrity measurement mechanisms had not been taken into consideration when designing the kernels,it usually causes the issue that integrity measurement mechanisms are not able to run on time.This paper proposes a multi-cores-based integrity measurement enforcement to solve this problem by adding mechanism supporting the measurement mechanisms to the kernel.This paper explains the design and implements of this method,and then analysis the effectiveness and performance of this method.By locating cores for the measurement mechanisms to run,the enforcement can let measurement mechanisms measure the kernel on time with little performance cost.