一个信息安全函数及应用模型  

An Information Security Function and Application Model

作　　者：刘益和[1] 沈昌祥[2] 

机构地区：[1]内江师范学院计算机与信息科学系 [2]海军计算技术研究所第一研究室,北京100841

出　　处：《计算机辅助设计与图形学学报》2005年第12期2734-2738,共5页Journal of Computer-Aided Design & Computer Graphics

基　　金：国家重点基础研究发展规划项目(G1999035801);四川省应用基础研究计划(04JY029096)

摘　　要：提出信息关心程度的概念,给出了基于机密性、完整性和可用性的矩阵信息安全函数,定义了读写公理.对于任意情况,新函数与BLP模型和Biba模型的信息安全函数对应.最后利用此函数值划分安全类,用2个客体的函数值描述信息流策略,由此得到一个应用信息流模型.经严格的数学证明,该模型是合理的和安全的,是基于BLP信息流模型和Biba信息流模型的一个扩展.By introduction of a new concept on the concern degree of information, the paper presents a novel matrix information security function, based on the confidentiality, integrality and availability, and at the same time a read-write axiom is defined. For arbitrary circumstances, the new security function corresponds to that in BLP model and Biba model. The security function value is used to make the safety classification of an object and the information flow policy is specified by the function value of two objects. As a result, an application information flow model is obtained. By a strict proof in mathematics, this model proves to be viable and safe. It is an expansion of the information flow model based on BLP model and the information flow model based on Biba model.

关 键 词：信息流模型 BLP模型 BIBA模型 机密性 完整性 有用性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]