面向对象系统的信息流安全研究

描述了面向对象系统的数据模型，研究了信息流和信息传输，并以此为基础给出了基于自主访问控制策略的分布式对象系统的信息流控制方法，该方法利用限制策略和消息过滤器算法可以在自主访问控制中实现强制访问控制中的＊属性，从而有效地防止特络伊木马对自主访问控制的威胁。

On Information Flow Security in Distributed Object-Oriented System

To keep independent object-oriented system secure from Trojan horse, there exists already a restrictive policy that blends information flow control with discretionary access control. But for distributed object-oriented system, existing methods of blending information flow control with discretionary access control are, to our best knowledge, not effective in preventing Trojan horse from leaking information. Subsection 3. 2 explains in detail a message filter algorithm that we propose to make our method of blending information flow with discretionary access control effective in preventing Trojan horse from leaking information for a distributed object-oriented system. Through applying this message filter algorithm to every TCB (Trusted Computing Base) in distributed object-oriented system, we can not only prevent Trojan horse from leaking information but also retain the flexibility of discretionary access control.