一种多安全域策略支持的管理机制  

Management Mechanism for Multi-domain Strategy

作　　者：段立娟[1] 刘燕[1] 沈昌祥[1] 

机构地区：[1]北京工业大学计算机学院,北京100124

出　　处：《北京工业大学学报》2011年第4期609-613,共5页Journal of Beijing University of Technology

基　　金：国家重点基础研究发展计划资助项目(2007CB311100);国家高技术研究发展计划项目(2009AA01Z437);国家软科学研究计划项目(2010GXQ5D317)

摘　　要：提出了一种基于策略的三权分立的分域管理机制.该机制依据最小特权和权值分离原则,将超级用户特权集进行划分,分别授予系统管理员、安全管理员和审计管理员.通过建立管理员间相互协作、相互制约和域间隔离机制,解决信息系统中超级用户权限过大的问题,增强系统的安全性.According to the characteristics of the productive information system,this paper presents a policy-based management mechanism for the sub-domain separation.The mechanism is based on the least privileges and separation of duty.Super-user privileges are divided into collections that are granted to the system administrator,the security administrator,and the auditor,respectively.Through the establishment of mutual collaboration between managers,mutual constraints,and inter-domain isolation mechanisms,the problem of the excessive privileges super-user in the information system is solved and the system security is enhanced.

关 键 词：安全策略 最小特权 安全域 信息安全 

分 类 号：TP303[自动化与计算机技术—计算机系统结构]