基于LogicSQL的多级安全数据库的研究与设计  

Research and Design of LogicSQL multilevel security database

作　　者：刘友缘[1] 马新强[1] 黄羿[1] 邹永康[1] 

机构地区：[1]重庆文理学院计算机学院,重庆402160

出　　处：《微计算机信息》2010年第9期156-158,共3页Control & Automation

摘　　要：数据库安全是当前信息安全研究的一个基础和难点,文章结合数据库的用户身份认证与自主访问控制研究,设计了LogicSQL多级安全模型。该模型把安全级分为分层密级和非分层的范围组成的二元组形式;主要从安全标签、强制访问控制和可信体系结构方面进行讨论。鉴于多级安全模型在高安全数据库系统中的重要作用,在自行开发的具有自主版权的数据库管理系统LogicSQL上实现了该模型,使其至少达到B1级别安全并在企业搜索与公安系统中得到应用。Database security is a foundation and difficult point of information security research nowadays.The paper designed multilevel security model of LogicSQL database, which is based on User Identifier, Discretionary Access Control（DAC） of database.Multilevel security model requires that all users and resources are classified and assigned a security label, which is a combination of a hierarchical security level and non-hierarchical security categories.We discussed few aspects of LogicSQL multilevel security model,including LogicSQL Label, Mandatory Access Control（MAC） and Trusted system structure .Because multilevel security model plays an important role in highly secured database system.The model for an independent copyright database management system LogicSQL is implemented.The paper designed at least the B1 security model for LogicSQL database.The model is applied in enterprise search and police system.

关 键 词：LOGICSQL 强制访问控制 多级安全模型 LogicSQL标签 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]