| 基于属性安全值的强制访问控制模型 |
| |
| 引用本文： | 陈杰伟,关宇,刘军. 基于属性安全值的强制访问控制模型[J]. 计算机科学, 2017, 44(Z6): 348-350, 376 |
| |
| 作者姓名： | 陈杰伟 关宇 刘军 |
| |
| 作者单位： | 解放军理工大学通信工程学院研究生1队 南京210007,解放军理工大学通信工程学院 南京210007,解放军理工大学指挥信息系统学院 南京210007 |
| |
| 摘 要： | 通过对ABAC定义的细粒度属性进行量化映射,结合BLP和Biba强制访问模型的基本特点,试图定义一个与属性相关的安全值量化概念,然后以安全值为基础,构建一个可以计算的封闭环境。其次计算得到一个基于属性映射的安全值集合,从而符合BLP和Biba强制访问控制模型的基本条件。再对BLP和Biba模型进行进一步优化,使其契合属性安全值的特点,形成一个灵活的基于属性安全值的强制访问控制模型。
|
| 关 键 词： | BLP Biba ABAC 属性 访问控制 模型 |
Mandatory Access Control Model Based on Safety Value of Attributes |
| |
| CHEN Jie-wei,GUAN Yu and LIU Jun. Mandatory Access Control Model Based on Safety Value of Attributes[J]. Computer Science, 2017, 44(Z6): 348-350, 376 |
| |
| Authors: | CHEN Jie-wei GUAN Yu LIU Jun |
| |
| Affiliation: | Postgraduate Team 1 CCE,PLA University of Science and Technology,Nanjing 210007,China,College of Communications Engineering,PLA University of Science and Technology,Nanjing 210007,China and College of Command Information Systems,PLA University of Science and Technology,Nanjing 210007,China |
| |
| Abstract: | By quantitatively mapping the fine-grained attributes defined by ABAC and by combining the basic features of BLP and Biba mandatory access models,an attempt is made to define a quantitative concept of security values related to attributes,and then a closed environment that can be calculated based on security values is built.Then a set of security values based on attribute mapping is calculated to meet the basic conditions of BLP and Biba mandatory access control model.Then BLP and Biba models are further optimized to fit the attribute security value and form a flexible mandatory access control model based on attribute security value. |
| |
| Keywords: | BLP Biba ABAC Attribute Access control Model |
|
| 点击此处可从《计算机科学》浏览原始摘要信息 |
|
点击此处可从《计算机科学》下载全文 |
|
