基于动态联盟关系的中国墙模型研究  

Chinese wall model based on dynamic alliance

作　　者：程戈[1] 金海[1] 邹德清[1] 赵峰[1] 

机构地区：[1]华中科技大学计算机学院,湖北武汉430074

出　　处：《通信学报》2009年第11期93-100,共8页Journal on Communications

基　　金：国家重点基础研究发展计划("973"计划)基金资助项目(2007CB310900)~~

摘　　要：BN中国墙模型及其诸多变种对写操作约束过强,从而导致在利用冲突关系进行资源划分时,需要事先静态划分访问区域。提出了一种基于动态联盟关系的中国墙模型,该模型通过建立联盟关系实现对利益冲突关系的扩展,从而动态地构建访问区域。证明了该模型能实现与BN中国墙模型相同的安全目标,并通过应用分析展示了该模型可以用于虚拟机系统的隐形流控制。The conflict of interest relation defined in BN Chinese wall model was usually utilized to divide the resources into different access regions. Unfortunately, the Chinese wall model gave much constraint on write permission that the access regions need to be predetermined and divided statically. A modified version of Chinese wall model was proposed to solve this problem. Through establishing dynamic alliance to extend the conflict of interest relation, the objects of different conflict classes could be dynamically divided into different access regions. Finally, a theory was verified that the modified version of Chinese wall model could achieve the same security goal as BN Chinese wall model. The analysis shows that the model can be applied in covert flows confinement in virtual machine system.

关 键 词：访问控制 中国墙模型 冲突关系 动态联盟关系 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]