高安全等级信息系统中的权限分离模型  

Research on the privilege separation model of high level information systems

作　　者：李瑜 马朝斌 

机构地区：[1]国家保密科技测评中心测评部,北京100044

出　　处：《山东大学学报（理学版）》2012年第11期18-23,共6页Journal of Shandong University(Natural Science)

摘　　要：为消除系统中作为超级用户的管理员权限,提出了一种高安全等级信息系统中的权限分离模型。将原有管理员分解为三个不同角色,形式化定义了权限的支撑关系和制约关系,给出了模型中的三权分立的权限制约算法、安全定理及安全性质,分析证明算法中不同角色的权限满足支撑及制约关系,保证了系统中最小特权原则的有效实施。The privileges of the superuser can cause a lot of malicious attacks. To solve the problem, the privilege sepa- ration model in high level information systems was proposed. The administrator in operating system was decomposed in- to three roles. The formal definition of support and constraints relationships of the permissions was obtained. Besides, the privilege separation algorithm and security theorems were proposed in the model. Through the formal analysis, it is proved that the privileges of different roles in the algorithm meet the support and constraints relationships. The model can ensure the implementation of principle of least privilege effectively.

关 键 词：权限分离 最小特权 安全模型 操作系统 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]