| Biba模型中严格完整性政策的动态实施 |
| |
| 引用本文： | 张相锋,孙玉芳.Biba模型中严格完整性政策的动态实施[J].计算机研究与发展,2005,42(5):746-754. |
| |
| 作者姓名： | 张相锋 孙玉芳 |
| |
| 作者单位： | 中国科学院软件研究所,北京,100080 |
| |
| 基金项目： | 国家“八六三”高技术研究发展计划基金项目(2002AA141080)，国家自然科学基金项目(60073022)，中国科学院知识创新工程基金项目(KGCX109) |
| |
| 摘 要： | Biba模型中的严格完整性政策能够有效地保证数据的完整性，但是该政策中主体和客体的完整性标记都是静态不变的，这会限制进程的一些原本合理的活动，从而降低应用程序的兼容性．提出严格完整性政策的动态实施方案，并给出该方案在基于Linux的安全操作系统RFSOS中的实现．该方案既可以保证系统的完整性，又能提高系统的兼容性．实验证明，这种方案对系统的整体效率的影响小于1％．
|
| 关 键 词： | 信息安全 信息完整性 严格完整性政策 Biba模型 |
Dynamic Enforcement of the Strict Integrity Policy in Biba's Model |
| |
| Zhang Xiangfeng,SUN Yufang.Dynamic Enforcement of the Strict Integrity Policy in Biba''''s Model[J].Journal of Computer Research and Development,2005,42(5):746-754. |
| |
| Authors: | Zhang Xiangfeng SUN Yufang |
| |
| Abstract: | While the strict integrity policy (SIP) of Biba's model can be used to maintain integrity of data in computer systems, the integrity labels of both subjects and objects in a system are always kept static in SIP, which might lead to denial to some non-malicious access requirements and hence decreases the compatibility of applications Dynamic enforcement of this policy (DESIP) is presented, which can increase compatibility of software while keeping system integrity as strictly as SIP can The implementation of DESIP is also given based on RFSOS, a Linux-based operating system, which shows that the impact of the enforcement of DESIP on system efficiency is less than 1% |
| |
| Keywords: | information security information integrity strict integrity policy Biba's model |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ |
