应用规律下的BLP模型密级赋值方法  

Secret level valuation method of BLP model based on some application properties

作　　者：董婵[1] 范修斌[2] 李有文[1] 王建荣[3] 

机构地区：[1]中北大学理学院,山西太原030051 [2]中国科学院软件研究所,北京100080 [3]北京科技大学计算机与通信工程学院,北京100083

出　　处：《通信学报》2013年第9期142-149,共8页Journal on Communications

基　　金：保障技术重点实验室开放基金资助项目(KG-11-03);国家自然科学基金资助项目(60833008;60902024)~~

摘　　要：根据信息系统的主客体访问属性规律,给出了一种可行的BLP模型密级赋值方法,提出了2个归并条件。继而给出了归并后的BLP模型下的主客体密级赋值的数学模型。证明了当条件解是非常值赋值解时,其扩张还原解不一定是全局解的结果,但由该解可以得到全局解的近似条件修改赋值解。利用近似条件修改赋值解,给出了某国家级信息系统BLP模型的密级具体赋值,解决了应用中的实际困难问题。According to the access attribute properties between subjects and objects in the information system, a viable method of the BLP model secret level valuation was given, and two merging conditions were put forward. The mathe-matical model of subject-object secret level valuation under BLP model was established on the two merging conditions. When the condition solution was not the constant one, its expansion solution being not sure the global one was proved, but the approximate condition modification valuation solution could be obtained from it. Using the above results, one dif-ficult problem from one national information system about the BLP model secret level valuation was solved.

关 键 词：信息安全 BLP模型 常值赋值 条件修改赋值 全局解 条件解 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]