跨域引用监视器及其以数据为中心的多级安全模型  

Cross domain reference monitor and its data-centered multilevel security model

作　　者：李洪敏[1] 万平国 葛杨 

机构地区：[1]中国工程物理研究院总体工程研究所,四川绵阳621900 [2]国际信息战略研究中心,北京100094 [3]军工保密资格认证中心,北京100094

出　　处：《计算机应用》2013年第3期717-719,742,共4页journal of Computer Applications

摘　　要：为基于不可信计算机系统来构建一个可信的多级安全(MLS)大系统,提出一种新型的跨域引用监视器及其多级安全模型。该跨域引用监视器采用现有的商业现货(COTS)产品,使用一个或多个独立的计算机,在两个或多个不同的网络之间,通过满足EAL7的单向传输硬件装置来连接。基于该跨域监视器实现了以数据为中心的多级安全模型。该模型允许信息从低密级网络流向高密级网络,也允许高密级网络把低密级数据发布给低密级网络,禁止高密级网络的高密级信息和无密级标记信息流向低密级网络,并已在分级保护的网络系统中成功应用。通过安全模型和安全策略的形式化描述和证明表明,基于该安全模型构建可信MLS大系统是可行的。A new cross domain reference monitor and Muhi-Level Security （MLS） model were proposed for a trusted MLS system. The model was based on Commercial Off-The-Shelf （COTS） products like commercial computers and security compliant hardware devices. System high networks were properly connected with reference validation computer by trusted one- way transfer devices （EALT） for data-centric MLS model. The model allowed information to flow from low domain to high domain, and allowed sanitization data with low label to flow from high domain to low domain, but data without low label were prohibited to flow from high domain to low domain. The model was applied to the information system of classification protection. Formal verification of security model and policy demonstrates it is feasible for a MLS system with COTS products and trusted hardware devices.

关 键 词：多级安全 引用监视器 安全模型 跨域 分级保护 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]