基于策略的安全模型研究

设计了一个基于策略的安全模型PMA（Policy Middleware Application）。PMA将安全管理目标及需求用形式化策略语言描述,实现了安全管理目标与应用技术的结合;借助中间件实施对安全模块的管理,将系统业务逻辑与安全行为分离,增强了安全防护的灵活性和扩展性;借助基于事件状态驱动的形式化分析方法,实现了基于策略的安全行为和状态的控制。

Research on Policy-based Security Modes

The paper designs a Policy Middleware Application model, in PMA, security managment and requirement of system are described in formal policy language, so it combines managment with technology. With the help of middleware to manage security module, PMA divides business logic from security action,thus increases the scalability and flex- ibility of security defense. Policy-based control of security action and state are realized wth the method about f- ormal analysis based on event and state.