The development of domestic high security rating operating system, now, it has already reached a hurdle, how can it be across the past. The security and ease of use itself is difficult to adjust, so the mainstream operating system Windows NT series, UNIX series is a tannin book C2. So far, Google can find a lot of secure operating systems, see the highest claim to reach the orange book B2 (equivalent to the fourth structure protection protection of national standard GB17859). But from the product description, Several products I have seen are actually for Linux and UNIX security improvements or security enhancements. Why don't I develop a secure operating system from head, but to have a safe enhancement of existing products, approximately the most important reasons It is too difficult for the former, and there is also a need for investment, and the latter is now easy to open this convenient condition.
Of course, the investment and output of system development are basically proportional. In fact, I think that if it is not from the initial construction of the corresponding security function and security, it is small in the later time. Improve security is very difficult. Perhaps Linux after security enhancement can reach B1, even part of the B2 standard, but it is very difficult to pass B2 security. It takes a long-term hard work to add a little luck.
So how to do after B2? B3 or even the A1 operating system relies safely to enhance this road. In fact, foreigners have given answers .vax / VMM, KVM / 370, ASOS, etc. B2 security level operating system It is based on security kernel (SECURITY KERNEL). Despite the opinion that the security kernel is not perfect, this method has been developed through B3, A1 certified operating system. At present, there is no more attractive Measures. Domestic seems to have not been able to develop high-security rating operating systems with secure kernel methods. This is completely two things to have in the past. So developing is difficult to develop. And there is strength and willing to do it again. I poured I believe that Microsoft definitely makes the power of the A1-level Windows, the problem is that it will not do it, because the operating system above B2 is not attractive to ordinary users.
You can't forget to be able to win, there is a presentation on the Chinese Academy of Sciences.
