一种面向操作系统应用类的安全策略

从保密性和完整性的角度分析了用户普遍使用的，建立在自主访问控制机制上的，应用在高安全等级操作系统上运行所面临的安全问题，提出了一种面向应用类的安全策略。面向应用类的安全策略将用户使用的应用抽象为应用类，定义了主体的运行状态——用户域和应用域以及客体的类别——用户数据和应用类数据，定义了用户数据访问控制规则，应用类数据访问控制规则以及主体安全状态的迁移规则，防止了用户数据的非授权泄露和应用类数据的非受权修改，为用户建立了一种高安全的应用环境。

A Kind of OS-oriented Application Class Security Policy

This article analyzes the security problem of discretional access control operating system application running on mandatory access control operating system and puts forward a kind of security policy oriented application. In security policy oriented application, the subject has two kind of security attribute status: user domain and application class domain; the object is divided as user data and application class data; user data access control rules, application class rules and security status transference rules are defined to prevent user data unauthorized disclosure and application class data unauthorized modification.