基于BLP模型的摆渡木马防御技术的研究

分析了摆渡木马的工作原理和特点,提出了控制数据从计算机流向移动存储介质的解决方法。根据BLP模型的基本思想,提出了基于BLP模型的摆渡木马防御方案。在该方案中,根据内网或计算机中文件的重要程度,将文件分成不同等级;将用户对文件的访问权限也分成相应的不同等级;当用户对文件进行访问时,通过比较权限等级和文件等级来决定是否能读或写,读或写采用＂下读上写＂的策略。由于把移动存储介质的级别设为最低,所以该方案能有效的防止摆渡木马。

Research on the Ferry Trojan Horse Defense Technology Based on BLP Model

This paper analyzes the working principle and characteristics of the ferry horse, puts forward the control data solutions from computer to mobile storage media. According to the basic idea of BLP model, the ferry Trojan defense scheme based on BLP model is proposed. In this scheme, according to the degree of importance of network or computer files, the files are divided into different levels; the user access to the file is divided into different levels of the corresponding; when the user access to the file, by comparing the authority rank and file level to decide whether to read or write. Because the mobile storage medium level set to a mininxum, so the scheme can effectively prevent the ferry horse.