具有共享属性的信息系统安全模型  

Information System Security Model With Sharing

作　　者：高朝勤[1] 肖创柏[1] 高允翔[1] 徐潇[1] 

机构地区：[1]北京工业大学计算机学院,北京100124

出　　处：《北京工业大学学报》2012年第11期1654-1658,共5页Journal of Beijing University of Technology

基　　金：国家'863'计划资助项目(2009AA01Z437);北京市自然科学基金资助项目(4110001)

摘　　要：针对多级安全信息系统中的信息保护和共享问题,将独立计算机系统中的BLP模型扩展至信息系统,引入需享原则和多级客体的概念,建立了一个面向应用的信息系统多级安全模型,提出信息系统的安全假设,给出了信息系统安全模型的形式化描述.该模型允许信息系统中需要共享信息的部门之间安全地共享信息,同时保持了信息系统的多级安全性.To address the problem of protection and sharing of information, the BLP model of stand-alone computer system was extended to information systems with multi-level security, the principle of need-to- share and the notion of multi-level object was introduced, and a multi-level security model of information system for application was developed. Then, some basic security assumptions were proposed, and the formal multi-level security model of information system was presented. The security model allowed the information to be securely shared with the right people and protected from the wrong people, while maintaining the multi-level security of information system.

关 键 词：信息系统 访问控制 安全模型 多级安全 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]