一种基于访问历史的BLP模型

针对经典的BLP模型无法控制间接信息流的缺点，借鉴信息流模型的思想，在系统状态中增加记忆分量，记录主体所读的客体，控制信息向安全的方向流动。为了提高BLP模型的可用性并增强信息的完整性，将主体的安全级扩充为读写分离的安全级区间。通过这些方法将BLP模型改造成为具有记忆能力的新型多级安全模型。

A BLP Model Based on Access History

In order to control the indirect information flow, this paper employs the idea of the information flow model, and adds the memorial factor in the system states to record the read objects and to control the direction of information flow. In order to improve the availability and the information integrity of the model, this paper also extends the security level of the subjects into separated reading and writing security level ranges. By using these methods,we develop the BLP Model into a new Multi-level Security Model with memory ability.