| 本文已被：浏览 5113次 下载 7559次 |
码上扫一扫！ |
|
|
| 基于可信级别的多级安全策略及其状态机模型 |
|
谢钧1,2, 许峰1, 黄皓1
|
|
1.南京大学,计算机软件新技术国家重点实验室,江苏,南京,210093;2.解放军理工大学,指挥自动化学院,江苏,南京,210007
|
|
| 摘要: |
| 虽然MLS(multilevel security)被广泛应用于各种安全系统,但是它不能实现信道控制等重要的安全策略.将可信级别的概念引入到MLS中,使其可以方便地实现各种信道控制策略.建立了一个实现这种基于可信级别的多级安全策略的访问控制状态机模型,并证明其对定义的策略是安全的,而且可以实现所有静态信息流策略.另外,还扩展了该模型,使其可以支持存储对象安全属性的动态改变.该模型克服了MLS不能解决安全降级问题以及不考虑完整性的缺点,同时又保留了传统分级策略模型易理解、易使用的优点. |
| 关键词: 安全策略 多级安全 访问控制模型 信息流模型 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the Natural Science Foundation of Jangsu Province of China under Grant No.BK2002073 (江苏省自然科学基金) |
|
| Trust Degree Based Multilevel Security Policy and Its Model of State Machine |
|
XIE Jun,XU Feng,HUANG Hao
|
| Abstract: |
| MLS (multilevel security) is being widely applied in many security critical systems, but it can’t implement many important security policies such as ‘channel-control’. In this paper, the concept of trust degree is introduced into the MLS to implement policies like ‘channel-control’ conveniently. An access control state machine model which enforces the trust degree based multilevel security policy is established, and is proved to be secure for this policy. It is also proved that this model can enforce all static information flow policies. An extension of the model is also offered to support the dynamic change of storage objects’ security labels. The model avoids the disadvantage of MLS’ not being able to resolve the problem of secure downgrading and not taking integrity into consideration, and at the same time it retains the advantage of easy understanding and use enjoyed by the traditional classified policy models. |
| Key words: security policy multilevel security access control model information flow model |
