强制访问控制模型研究与实现  

Research and implementation of mandatory access control model

作　　者：张海娟[1] 付争方[2] 罗琴[2] 吴茜[2] 

机构地区：[1]安康学院经济与管理系,陕西安康725000 [2]陕西师范大学计算机科学学院,陕西西安710062

出　　处：《计算机工程与设计》2008年第3期595-597,共3页Computer Engineering and Design

基　　金：安康学院专项科研计划基金项目(2006AKXY010)

摘　　要：强制访问控制常用于多层次安全级别的军事系统中,通过梯度安全标记实现信息的单向流通,可以有效地阻止特洛伊木马的泄露,其缺陷主要在于实现工作量较大、管理不便和不够灵活,究其原因是主体和客体的安全级别很难确定。引入模糊逻辑的思想,提出了基于模糊的强制访问控制模型;根据主体的信任度和客体的重要性,运用模糊综合评判法计算出主体的安全级别和客体的密级,使其能够更好地满足军事系统中访问控制的要求。Mandatory access control used to apply in military system with multilevel safe rank, which can effectively prevent Trojan horse from leak out by grads security flag to achieve information unilateralism circulation. Limitation rests with realizing complexity, management inconveniently and unskillfully, because of ascertaining hardly subjects＇ and objects＇ security level. The idea of fuzzy logic is introduced, fuzzy-based mandatory access control model is proposed; subjects＇ security level and objects＇ clearance are calculated by exerting fuzzy comprehensive evaluation on the basis of subjects＇ trust value and objects＇ importance, which can satisfied requirements of access control in military system.

关 键 词：访问控制 密级 信任度 重要性 模糊综合评判法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]