Enforcing mandatory integrity protection in operating system

It is functionality other than security that was put in the first place when most systems and applications were built. The threats brought by Internet connectivity, downloaded code and loaded modules are obvious and dangerous and requires a kind of reliable integrity protection. In this paper we present our mandatory integrity protection (RS-MIP) building in a secure Linux operating system kernel. We describe the security policy and integrity model on which RS-MIP is based, and its underlying implementation technology. Finally, we compare it to other security protection approaches.