Availability Evaluation Method and Implementation Framework of Multilevel Secuerity Systems with Credibility Characteristics  

作　　者：TAN Zhiyong LIU Duo DAI Yiqi 

机构地区：[1]Department of Computer Science and Technology, Tsinghua University, Beijing 100084, China

出　　处：《Chinese Journal of Electronics》2010年第1期61-65,共5页电子学报（英文版）

基　　金：This work is supported by the National Natural Science Foundation of China （No.60673065）.

摘　　要：To evaluate and choose proper credibility evaluation functions and credibility threshold parameters in the Multilevel security （MLS） system based on the CBLP model which was proposed in the authors＇ previous papers we devised a sampling statistics method to evaluate the availability of the MLS system, by obtaining the change curve of the subjects＇ credibility and the rejection ratio of access operations. The validity of this method was evaluated according to the strong law of large numbers and the central limit theorem. The analysis of specific scenarios showed that the result of the sampling statistics method is highly consistent with that of the formal analysis methods. Then an implementation framework based on the availability evaluation method is proposed. Since it is hard to evaluate the availability of the system completely by formalization analysis, the sampling statistics analysis method can provide an important reference for the effective implementation of the CBLP system.

关 键 词：Access control Multilevel security BLPsecurity model CREDIBILITY Availability evaluation. 

分 类 号：O211.4[理学—概率论与数理统计] TU375.4[理学—数学]