基于动态信息流关联的电子文档泄漏防护框架  

Document leakage prevention framework based on dynamic information flow reference

作　　者：马俊[1] 伍江江[1] 程勇[1] 王志英[1] 任江春[1] 

机构地区：[1]国防科学技术大学计算机学院,长沙410073

出　　处：《计算机应用》2010年第12期122-125,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60903204)

摘　　要：电子文档在使用过程中,既要防止来自外部的病毒木马的窃取,又要预防内部人员有意或无意的复制、打印或网络发送等操作造成的内容泄漏。提出了一种基于动态信息流关联的文档防泄漏框架,通过实时监控文档信息流在磁盘、内存、网络以及打印机等其他外围设备之间的流动,实现设备模块之间的关联分析和联动控制,从而可以及时发现并阻断可能导致文档泄漏的信息流通道,满足"防外"和"防内"的双重安全需求。给出了关联分析过程的描述和分析,在W indows平台下的系统实现验证了该框架的有效性和可行性。Electronic documents face the dual threats of theft by external viruses or Trojans as well as leakages by internal employees.This paper proposed a leakage prevention framework based on dynamic information flow reference analysis.Through supervising the real-time information flows in various external equipments such as disk,memory storage,network,printer,the framework provided a linkage mechanism of corresponding control facilities to analyze information flow references,pick out illegal flow and reject or revoke them.So it could prevent leakages caused by internal or external threats.Also,there are particular descriptions and analysis of the mechanism as well as a realization on Windows platform to validate the protection effectiveness.

关 键 词：电子文档 泄漏防护 信息流 访问控制 过滤驱动 钩子 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]