| 本文已被：浏览 4911次 下载 6990次 |
码上扫一扫！ |
|
|
| 一个改进的可动态调节的机密性策略模型 |
|
季庆光1,2, 卿斯汉1,2, 贺也平1,2
|
|
1.中国科学院,软件研究所,北京,100080;2.中国科学院,信息安全技术工程研究中心,北京,100080
|
|
| 摘要: |
| 试图提出一个模型,它能为有效处理网络安全对象提供支持.改进Amon ott的动态调整规则,使需要动态改变的量减少,从而使一个系统调用级的原子操作需要伴随的附加量的操作和存储减少,提高模型在系统中的实用性.通过把当前安全级变成敏感标签范围而增加模型在系统实现中的灵活性,能有效控制IPC对象.为此,把Amon ott动态地调整当前敏感标签的规则推广为动态地调整敏感标签范围的规则,这把Bell为处理网络情况而把主体的当前安全级变成敏感标签范围的工作与Amon ott的工作有机地结合起来,同时,参考实际中使用的系统GEMSOS和DG/UX及安全原型微内核系统Fluke,引入了单级实体、多级实体以及专用于进程的访问模式,并给出了它们应满足的不变量及限制性条件.另外,在参考原型系统TMach对IPC对象的某些处理方式的基础上,提出了使动态特征非常明显的IPC对象得到合理、有效管理的机制,同时还分析了ABLP实施方法中存在的一些不当之处.提出了一个新的机密性策略模型DBLP的模型不变量,限制性条件及变量类型和常量,并分析了一些限制性条件的合理性,它可以有效应用于系统设计. |
| 关键词: 机密性策略 形式模型 安全级范围 多级实体 IPC对象 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Natural Science Foundation of China under Grant No.60083007(国家自然科学基金);the National Grand Fundamental Research 973 Program of China under Grant No.G1999035810(国家重点基础研究发展规划(973)) |
|
| An Improved Dynamically Modified Confidentiality Policies Model |
|
JI Qing-Guang,QING Si-Han,HE Ye-Ping
|
| Abstract: |
| This paper presents a model which can support network security objects, improve the Amon ott’s rules with small amount of operations and storages for practicality, enhance the flexibility available for system implementation by making the single level becoming level range , and control IPC objects effectively. For these purposes, the Amon ott’s rules for dynamically modifying the current sensitivity level are extended to ones for sensitivity levels range, so Bell's work on making the single level becoming level range for network security can be combined with Amon ott’s. Considering the cases in the practical system GEMSOS,DG/UX and prototype microkernel system Fluke, single level entity, multiple level entity and special access mode for progress, and the invariants and constraints corresponding to them are introduced. Based on Tmack’s way, a sufficient mechanism for IPC objects is posed. In addition, some flaws in ABLP model are pointed out. A new confidentiality policy model with formal specification of invariants, constraints, variables, and constants has been presented with demonstrating reasonableness for some constraints, and it can be used for system design. |
| Key words: confidentiality policy formal model sensitivity level range multiple level entity IPC objects |
