基于安全熵的访问控制模型量化分析方法  

Quantitative analysis method to access control model based on security entropy

作　　者：王超[1] 陈性元[1] 熊厚仁[1] 曾光[1] 

机构地区：[1]解放军信息工程大学电子技术学院,河南郑州450004

出　　处：《计算机工程与设计》2012年第8期2911-2914,2925,共5页Computer Engineering and Design

基　　金：国家973重点基础研究发展规划基金项目(2011CB311801);河南省科技创新人才计划基金项目(114200510001)

摘　　要：针对访问控制模型的量化分析问题,提出基于安全熵的安全性量化分析方法。结合信息论有关知识引入安全熵概念,基于安全熵对模型的安全性进行定义;应用该方法对BLP等经典安全模型进行了量化分析,验证了该方法的实用性,并指出了访问控制模型和BLP模型对非授权间接访问防护方面的不足。实验结果表明,该方法适用于访问控制模型的安全性度量以及系统的访问控制能力评估。To resolve the problem of quantitative analysis on access control model, a method to access control model＇ s security quantitative analysis based on security entropy is proposed. Firstly, the security entropy is put forward according to the information theory, and the security of access control model is defined based on security entropy. Then, the typical access control models are analyzed by the method, the validity of the method is proved, and the shortage of unauthorized indirectly access protection in access control matrix model and BLP is pointed out. The result proves that the methods is suit for security quantitative analysis on access control model and evaluation to access control capability in information system.

关 键 词：信息熵 安全熵 访问控制模型 安全性量化分析方法 模型安全性 非授权间接访问 

分 类 号：TP301.1[自动化与计算机技术—计算机系统结构]