| 本文已被：浏览 4955次 下载 5946次 |
码上扫一扫！ |
|
|
| 一个非确定系统的不干扰模型 |
|
谢钧1, 黄皓2
|
|
1.解放军理工大学,指挥自动化学院,江苏,南京,210007;2.南京大学,计算机科学与技术系,江苏,南京,210093
|
|
| 摘要: |
| 提出系统动作对信息域的不干扰概念,并在此基础上将不干扰模型推广到非确定系统.由于基于系统动作的不干扰概念简化了系统动作序列的提取操作,该模型的单步展开条件具有简洁的形式并易于理解和使用.推广后的不干扰模型不仅能够验证静态信息流策略,还可以验证各种动态信息流策略.最后设计了一个基于动态标记的访问控制模型,并在该模型中定义了读、写、执行等操作的具体语义,然后利用不干扰模型对其安全性进行了形式化验证. |
| 关键词: 不干扰模型 信息安全 安全模型 访问控制模型 信息流 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Natural Science Foundation of China under Grant No.60473093 (国家自然科学基金) |
|
| A Noninterference Model for Nondeterministic Systems |
|
XIE Jun,HUANG Hao
|
| Abstract: |
| The noninterference concept for actions of system to information domains is proposed. On the basis of this concept, the noninterference model is extended to nondeterministic systems. The noninterference concept based on actions of system simplifies the “purge” of the action sequence of the system. As a result, this model has concise unwinding conditions which are easy to understand and use. The extended model can be used to verify not only static but also dynamic information flow policies. Finally, a dynamic label based access control model is designed, in which the concrete semantic of the actions such as read, write and execute are defined, and its security is verified by the noninterference model. |
| Key words: noninterference model information security security model access control model information flow |
