一种面向局域网的多级安全模型  

A Multi-level Security Model for Local Area Network

作　　者：王浩[1] 陈泽茂[1] 谌双双[1] 

机构地区：[1]海军工程大学电子工程学院,武汉430033

出　　处：《计算机工程》2012年第21期141-144,共4页Computer Engineering

基　　金：中国博士后科学基金资助特别项目(201003757)

摘　　要：为保证局域网环境下共享信息的机密性,提出一种基于BLP模型的局域网多级安全模型MLS-LAN。引入密级标定部件,标定动态信息资源的安全级别,利用接入认证部件和访问控制部件,定义接入认证、信息共享和通信关系控制等规则,由此实现多级信息资源的安全共享。理论分析结果表明,该模型可以对信息共享实施可靠的访问控制,提高了局域网信息共享的安全性。In order to ensure the confidentiality of information sharing in Local Area Network（LAN）, a multi-level security model for LAN based on BLP model named MLS-LAN is proposed. It estimates the security-level of dynamic information resources by introducing security-level calibration facility in LAN, and it uses access authentication facility and access control facility to define access authentication, information sharing and communication relationship control rules, so that secure sharing for multi-level information in LAN is realized. Theoretical results show the model can provide reliable access control to information sharing and enhance its security.

关 键 词：多级安全模型 信息共享 访问控制 BLP模型 网络安全 信息密级标定 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]