一个多策略安全模型的研究与设计

信息系统的安全性越来越受到人们的关注.在安全操作系统的研究过程中,提出了许多安全模型.本文研究了在军事部门使用的、保证信息机密性的BLP模型和在商业部门使用的、保证信息完整性的Clark-Wilson模型.在此基础上,借鉴了RBAC模型中的角色概念,提出了一个能够同时保证信息的机密性和完整性的多策略安全模型MPSM(Multi-Policy Security Model).文中给出了MPSM的设计,讨论了它的机密性控制策略和完整性校验方法,并且介绍了MPSM的体系结构和各个子模块的功能.

Research and Design of a Multi-policy Security Model

Today, people pay more attention to the security of information system. In the process of the research of secure operating system, many security models are proposed. This paper studies BLP model that is mainly used in military department for confidentiality purpose and Clark-Wilson model that is mainly used in business department for integrity purpose. Using the idea of role conception in RBAC, we propose a multi-policy security model (MPSM) that supports both confidentiality and integrity of information. W...