基于MLS策略的机密性和完整性动态统一模型  

Confidentiality and integrity dynamic union model based on MLS policy

作　　者：张俊[1] 周正[1] 李建[2] 刘毅[2] 

机构地区：[1]海军工程大学电气与信息工程学院,武汉430033 [2]解放军信息工程大学电子技术学院,郑州450002

出　　处：《计算机工程与应用》2008年第12期19-21,共3页Computer Engineering and Applications

基　　金：国家高技术研究发展计划(863)(the National High- Tech Research and Development Plan of China under Grant No.2006AA01Z440)

摘　　要：BLP模型是最经典的机密性模型,Biba模型则是最经典的完整性模型。绝大多数主客体机密性和完整性具有一致性,BLP模型和Biba模型就产生矛盾。提出了机密性和完整性的动态统一模型,给出了一系列安全规则,引入访问历史标记,动态调整主体的安全标记,将BLP和Biba真正结合起来,实现了机密性和完整性的统一,使系统具有较好的可用性。并给出了实例对模型进行了说明。BLP model is the most classical confidentiality model,and Biba model is the most classical integrity model.Most of subject and object have same level of confidentiality and integrity,but BLP and Biba have contradiction in this situation.This paper puts forward confidentiality and integrity dynamic union model,and gives a serial security rule.By importing history label,subject’s security label is adjusted dynamically,making BLP and Biba banded together in deed.The model realizes the union of confidentiality and integrity,and the system has a good usability.At last,an example is presented to explain the model.

关 键 词：BLP BIBA 安全模型 敏感标记 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]