• 제목/요약/키워드: linux

검색결과 1,583건 처리시간 0.025초

Implementation of Security Kernel based on Linux OS (리눅스 운영체제 기반의 보안 커널 구현)

  • Shon, Hyung-Gil;Park, Tae-Kyou;Lee, Kuem-Suk
    • The KIPS Transactions:PartC
    • /
    • 제10C권2호
    • /
    • pp.145-154
    • /
    • 2003
  • Current security efforts provided in such as firewall or IDS (intrusion detection system) of the network level suffer from many vulnerabilities in internal computing servers. Thus the necessity of secure OS is especially crucial in today's computing environment. This paper identifies secure OS requirements, analyzes tile research trends for secure Linux in terms of security kernel, and provides the descriptions of the multi-level security(MLS) Linux kernel which we have implemented. This security kernel-based Linux meets the minimum requirements for TCSEC Bl class as well providing anti-hacking, real-time audit trailing, restricting of root privileges, and enterprise suity management functions.

Performance Comparative Analysis of Flash File System for Embedded Systems on Linux Environment (리눅스 환경에서 임베디드 시스템을 위한 플래시 파일 시스템의 성능 비교 분석)

  • Choi, Jin-Oh
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • 제18권1호
    • /
    • pp.109-114
    • /
    • 2014
  • Recently the operating system share of linux on embedded system is increasing. The embedded systems on linux environment, commonly equip a file system as mini hard disk or flash memory to keep data. The types of the file system of the system are various according to it's operating system. Anyway, the more embedded system depends on the file system, the selection of the type of the file system effects more on the performance of the system. This thesis performs the performance benchmark of a FAT and Ext file systems which are most popular in embedded system. As the result, it is discussed that what file system is better at which case. These results will be a index at the selection of flash file system of the embedded systems on linux environment.

Web-Based Remote Management of Industrial Inverter using Embedded Linux (임베디드 리눅스를 이용한 산업용 인버터의 웹 기반 원격 관리)

  • 조덕연;최병욱
    • Journal of Institute of Control, Robotics and Systems
    • /
    • 제9권4호
    • /
    • pp.340-346
    • /
    • 2003
  • Driven by the growth of the Internet and the increasing ubiquity of embedded computing systems, the embedded system is exploding in terms of it proliferation of products and the number of complex applications. Intelligent dedicated systems and appliances used in interface, monitoring, communications, and control applications increasingly demand the services of a sophisticated, state-of-the-art operating system. In the case of industrial controller, it is required to use a real-time operating system (RTOS) as a good building block to enable Internet connectivity. However, commercial RTOSes are increasingly less desirable due to their lack of standardization and their inability to keep pace with the rapid evolution of technology. In order to overcome these problems, we consider using embedded Linux and embedded web server. Availability of source code, reduced licensing, reliability, open source community support, as well as others, are key reasons for the use of embedded linux by embedded developers. In this paper, we develop embedded linux platform to control the industrial inverter with the Internet connecting feature. The method of web-based management is also proposed by using the embedded web server and Java applet. We show the feasibility of remote management for the commercial inverter controller with the proposed three-tier web-based remote management system.

Implementation and Evaluation of Multi-level Secure Linux (다중등급 보안 리눅스 구현 및 시험평가)

  • 손형길;박태규;이금석
    • Journal of KIISE:Computing Practices and Letters
    • /
    • 제9권3호
    • /
    • pp.311-321
    • /
    • 2003
  • A current firewall or IDS (intrusion detection system) of the network level suffers from many vulnerabilities in internal computing servers. For a secure Linux implementation using system call hooking, this paper defines two requirements such as the multi-level security function of TCSEC B1 and a prevention of hacking attacks. This paper evaluates the secure Linux implemented in terms of the mandatory access control, anti-hacking and performance overhead, and thus shows the security, stability and availability of the multi-level secure Linux. At the kernel level this system protects various hacking attacks such as using Setuid programs, inserting back-door and via-attacks. The performance degradation is an average 1.18% less than other secure OS product.

Analysis of the Hashing and Encryption Algorithms Applied to the Linux (리눅스에 적용된 해시 및 암호화 알고리즘 분석)

  • Bae, Yu-Mi;Jung, Sung-Jae;Soh, Wooyoung
    • Journal of Advanced Navigation Technology
    • /
    • 제20권1호
    • /
    • pp.72-78
    • /
    • 2016
  • MD-5 has been the hash algorithm to encrypt the user's password on Linux from the beginning. Recently the more reliable password management was demanded and SHA-512 algorithm became the hash algorithm on the recent Enterprise Linux which is more reliable than MD-5. This paper researching the characteristics of the hashing and encryption algorithms and find out about Linux User information management. Based on this analysis, and analysis of the security of the hashing algorithm is applied to the user password. In addition, analyzes the cases used hash algorithm applied to the validation of Open Source Software file, such as Apache, PHP, MySQL. Finally, by analyzing the security tool John The Ripper this paper suggests the enhanced security with the administrative management of passwords.

Analysis of Linux System changes by adoption XFS File System (XFS 파일 시스템 채택에 따른 리눅스 시스템 변화 분석)

  • Sung, Kyung
    • Journal of Digital Contents Society
    • /
    • 제19권3호
    • /
    • pp.497-503
    • /
    • 2018
  • RHEL 7, the leader in the enterprise Linux market, has dramatically increased the maximum support specification, such as file system size, file size, etc., by changing the default file system from EXT to XFS. It's not just an increase in support specifications, it's working on daemons, and it's showing excellent performance on high-performance disks such as high-capacity disks and solid state drives. Changes in the file system mean changes in direct operating techniques, such as changing related commands, changing backup tools, and changing disk quota settings. The changes to the XFS file system are making a lot of changes to the operation of the Linux system, but we believe that the position of the Linux operating system in the server field will become stronger.

Remote Measurement of ECU Sensor Signal based on the Embedded Linux and Web (임베디드 리눅스와 웹 기반의 ECU 센서신호 원격계측)

  • 이현호;최광훈;권대규;이성철
    • Proceedings of the Korean Society of Precision Engineering Conference
    • /
    • 한국정밀공학회 2003년도 춘계학술대회 논문집
    • /
    • pp.1042-1045
    • /
    • 2003
  • In this paper, we present a new method for the monitoring of Electric Control Unit's(ECU) self-diagnostic and the sensor signals of vehicle through Web. In order to measure the ECU's self-diagnostic and sensor signals, the interfaced circuit is designed to communicate ECU and terminal according to the ISO, SAE regulation of communication protocol standard. Microprocessor 80C196KC is used for communicating ECU's self-diagnostic signals and the results are sent to the Embedded Linux System(ELS) through RF module. ELS is developed by SA1110, RF module, Embedded Linux. All commands related in ECU communication are executed through Web. The CGI program composed in web server is executed by user and will return sensor signals from ECU Software on Embedded Linux system is developed to monitor the ECU's sensor signals using the arm compiler tool chain in which RS232 port is programmed by half duplex method. The possibility for remote measurement of ECU sensor signal through Web is verified through the developed systems and algorithms.

  • PDF

Development of Electronic White-board Based on Embedded Linux (임베디드 리눅스 기반의 전자 칠판 시스템 개발)

  • Seo, Chang-Jun
    • IEMEK Journal of Embedded Systems and Applications
    • /
    • 제2권4호
    • /
    • pp.214-220
    • /
    • 2007
  • Recently, most embedded systems have the multi-functions mixed the hardware with the software. The existing sequence programming methods are not suitable to implement the embedded system with multi-functions. So, it can be overcome the limit of a facility implementation by introducing the operating system in system. Also, due to the requirement about the better convenient and comfortable meeting or lecture environment, the necessity of electronic white-board is getting higher. Specially, the education using multimedia information is much more desirable for various and improved lecture at the high school and the university. But the sequence program which have been managed in existing electronic white-board system has some difficulties to achieve the software-oriented systems which has to accomplish many functions. In this paper, we propose the method to implement a facility of electronic white-board through using the embedded linux with excellent performance. The embedded linux presents the powerful software environment for the implementation of an embedded system and makes the realization of many various functions easy because it follows kernel characteristics of linux. In this paper, we describe the details for the structure of hardware, kernel source and device driver of a developed electronic white-board.

  • PDF

Implementation of Home-Network Sewer using UPnP based on the Embedded Linux (Embedded Linux 기반의 UPnP를 사용한 홈-네트워크 서버 구현)

  • 정진규;진선일;이희정;황인영;홍석교
    • The Transactions of the Korean Institute of Electrical Engineers D
    • /
    • 제53권9호
    • /
    • pp.638-643
    • /
    • 2004
  • Middleware enables different networking devices and protocols to inter-operate in ubiquitous home network environments. The UPnP(Universal Plug and Play) middleware, which runs on a PC and is based on the IPv4 protocol, has attracted much interest in the field of home network research since it has versatility The UPnP, however, cannot be easily accessed via the public Internet since the UPnP devices that provide services and the Control Points that control the devices are configured with non-routable local private or Auto IP networks. The critical question is how to access UPnP network via the public Internet. The purpose of this paper is to deal with the non-routability problem in local private and Auto IP networks by improving the conventional Control Point used in UPnP middleware-based home networks. For this purpose, this paper proposes an improved Control Point for accessing and controlling the home network from remote sites via the public Internet, by adding a web server to the conventional Control Point. The improved Control Point is implemented in an embedded GNU/Linux system running on an ARM9 platform. Also this paper implements the security of the home network system based on the UPnP (Universal Plug and Play), adding VPN (Virtual Private Network) router that uses the IPsec to the home network system which is consisted of the ARM9 and the Embedded Linux.

Improvement Method and Performance Analysis of Shared Memory in Dual Core Embedded Linux system (듀얼코어 임베디드 리눅스 시스템에서 공유 메모리 성능 개선 방안 및 성능 분석)

  • Jung, Ji-Sung;Kim, Chang-Bong
    • Journal of Internet Computing and Services
    • /
    • 제11권4호
    • /
    • pp.95-106
    • /
    • 2010
  • Recently multiple process communicate together. They share resource and information for cooperation in complicated programming environment. Kernel provides IPC (Inter -Process Communication) for communication with each other process. Shared Memory is a technique that many processes can access to identical memory area in the Linux environment. In this paper, we propose a performance improvement method of shared memory in the dual-core embedded linux system which is consist of different core and different operating system. We construct the MPC2530F (ARM926F+ARM946E) linux system and measure the performance therein. We attempt a performance enhancement in each CPU for each process which uses a shared memory.