Chinese Wall模型在开放综合安全模型中的实现  

Implement of Chinese Wall Model Based on an Open Synthetical Security Model

作　　者：雷新锋[1] 刘军[1] 肖军模[1] 

机构地区：[1]解放军理工大学通信工程学院,南京210007

出　　处：《北京邮电大学学报》2009年第3期73-76,共4页Journal of Beijing University of Posts and Telecommunications

基　　金：江苏省自然科学基金项目(BK2008090)

摘　　要：Chinese Wall模型体现了随系统运行而不断改变的动态安全策略,但使用范围有限.为了保持安全模型在适应不同领域的同时能体现动态安全策略,基于一种开放的综合安全模型(OSSM),提出Chinese Wall模型的实现方法.该方法首先通过构造动态累加角色,记录必要的访问历史;然后结合历史访问及安全策略对当前访问请求作出决策,以体现策略的动态性.分析结果表明,该方法保持了Chinese Wall模型的安全性,扩充了OSSM的适用范围,同时保持了较高的效率.To make the dynamic security policy applied to an extensive area, based on an open synthetical security model（OSSM）, an implement method of Chinese Wall model is proposed. A dynamic accumulative role（DAR） is built to record the necessary historical access, and then, the response to the current access request is made, based on both the security policy and historical access, to meet the dynamic of the policy. The results shows that this method meets the security of Chinese Wall model, extends the applied area of OSSM, and keeps high efficiency.

关 键 词：信息安全 ChineseWall模型 开放综合安全模型 动态安全策略 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]