基于强制访问控制的文件安全监控系统的设计与实现  

Design and implementation of file watching system based on mandatory access control

作　　者：王雷[1] 庄毅[1] 潘龙平[1] 

机构地区：[1]南京航空航天大学信息科学与技术学院,江苏南京210016

出　　处：《计算机应用》2006年第12期2941-2944,共4页journal of Computer Applications

基　　金：航空基金资助项目(04C52009);国防工业基础基金资助项目(Q172005A001)

摘　　要：重点分析了基于信息保密的BLP(Bell-LaPadula)模型和基于信息完整性的Biba模型,基于这两个模型设计了兼顾系统保密性和完整性需求的强制访问控制模型,并结合Windows文件过滤驱动程序开发了一个基于该强制访问控制模型的文件安全监控系统,对其主要模块和关键技术进行了详细介绍。该文件安全监控系统可有效地维护文件系统的保密性和完整性,检测并阻断本地与网络的入侵。Bell-Lapadula model based on information confidentiality and Biba model based on information integrity were introduced. Then a new Mandatory Access Control （MAC） model based on the two modules above was designed. By using Windows NT file filter driver, a file watching system which adopted this new MAC model was developed, and the components and key technologies of it were given in detail. This file watching system has the advantages of protecting information confidentiality and integrity, and resisting the attacks from both local and remote users.

关 键 词：强制访问控制 模型 文件过滤驱动 文件监控系统 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]