一种改进的BLP模型主体敏感标记及其动态调整方案

本文对经典BLP模型的主体敏感标记进行改进，提出一个读写敏感度标记分离、区间权限、动态调整主体当前敏感标记的方案。该方案中主体的读写敏感度标记是相互分离的安全级区间。主体根据客体的敏感标记和主体的历史访问过程，根据一定的策略在读写区间内分别动态调整主体的当前读、写敏感标记而不破坏系统的安全性，从而提高BLP
模型的灵活性和实用性。

An Improvement of the Subject's Sensitivity Label and the Dynamic Determination of the Current Sensitivity Label for the Classical BLP Model

An improvement to the sensitivity label of the subjects of the BLP model and the scheme of the dynamic determination of the current sensitivity label are proposed in this article. The sensitivity label of the subject is separated into two parts: write sensitivity range and read sensitivity range. One subject could change its current write sensitivity label and current read sensitivity label according to the sensitivity label of related objects dynamically without destroying the security axioms of the BLP model, and then can improve the agility and practicability of the BLP model.