基于用户行为的可信模型研究  

Research on trustworthy model based on user behavior

作　　者：欧嵬[1] 王勇军[1] 韩文报[2] 

机构地区：[1]国防科学技术大学计算机学院,湖南长沙410073 [2]信息工程大学信息工程学院,河南郑州450002

出　　处：《计算机工程与科学》2013年第5期46-50,共5页Computer Engineering & Science

基　　金：国家863计划资助项目(2009AA01A346)

摘　　要：传统的授权与认证主要解决了用户的身份信任问题,但并没有解决用户行为的信任问题。基于此,从解决系统安全需求的角度出发,提出了一种基于用户行为的可信模型。该模型将网络服务的用户看作主体,计算机系统中的文件和数据看作客体,对不同的主体和客体分别赋予不同的机密性级别和完整性级别;同时,将用户对系统的服务请求映射为主体对客体的访问,通过定义模型的安全属性、安全策略以及用于约束用户行为的规则,构造了一个安全、可信的系统。Traditional authorization and authentication solves the problem of trust of user identify, but not solves the problem of trust of user behavior. Therefore, the paper proposed a new trustworthy model based on user behavior so as to meet the needs of security systems. In this model, users of net- work service are regarded as subjects, and files and data in computer are regarded as objects. Different subjects and objects are assigned to different levels of confidentiality and integrity. A user＇ service request on system is mapped into the access from a subject to an object. In this model, security attributes and security strategies and rules used to restrict users＇ behavior are all defined. Hence, a security and trustworthy computer system is made up.

关 键 词：用户行为 信任 安全属性 安全策略 规则 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]