改进的操作系统安全访问控制模型  

An improved secure access control model in Operating System

作　　者：权义宁[1] 胡予濮[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室

出　　处：《西安电子科技大学学报》2006年第4期539-542,共4页Journal of Xidian University

基　　金：国家自然科学基金资助项目(60273084)

摘　　要：提出了一个基于多级安全策略的强制访问控制模型,它的保密性安全规则是基于BLP模型,而完整性安全规则是基于Biba模型.由于BLP模型和Biba模型的信息流走向完全相反,简单将它们结合会引起对某些客体进行合法的访问遭到拒绝,因此对主体和客体引入了可信度策略,使得主体在进行合法的资源访问时不会因为安全级别较低而遭到拒绝,从而使保密性和完整性两个安全特性能够紧密地结合在一起.该模型既能防止越权泄露信息,又能控制信息的非授权修改。A mandatory secure access control model named SOSACM of Operating System that is based on the multi-level security policy is put forward. Its confidetiality inherits the BLP model, and its definition of integrity is on the basis of Biba model. But in fact, the simple conjunct of BLP and Biba models will make some legal object not accessible because the directions of information flow in the BLP model and integrity in the Biba model are opposite. In the model, a trusted level strategy that makes the combination of confidentiality and integrity property fight has been devdoped, which should ensure that subjects can access objects legally. The model will be beneficial to its application to constructing secure Operating Systems in future.

关 键 词：多级安全策略 强制访问控制 安全模型 操作系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]