一个基于访问历史的BLP改进模型的修正  

A Correction in an Improved BLP Model Based on Access History

作　　者：刘爱军[1] 田祎[2] 

机构地区：[1]商洛学院数学与计算机应用学院,陕西商洛726000 [2]商洛学院经济与管理学院,陕西商洛726000

出　　处：《商洛学院学报》2015年第6期11-14,23,共5页Journal of Shangluo University

基　　金：陕西省教育厅专项科研计划项目(14JK1221)

摘　　要：为克服SLCF安全模型使用动态调整主体安全标记方法不当,造成信息泄漏的安全隐患问题,结合BLP基本安全准则,分析指出该模型存在的不足,提出从信息流角度,根据访问历史记录,对信息流入、流出标记函数的变化规则进行修正的基本思想,给出了新的修正访问控制规则,并通过实例,对修正效果的正确性进行分析验证,结果表明该修正访问控制规则,在确保应用系统的可用性和灵活性的前提下,确实有效防止了信息的非法泄漏,增强了系统的安全性。The SLCF model can＇t adjust the subject security label properly by using dynamic methods and may cause a variety of security risks such as information leakage. To circumvent above-mentioned problems,we point out the shortcomings in the present model and propose a new improvement access control rules by integrating BLP basic security policies. From the information transmission angle, the rules modify the information flow marking functionon the basis of access history. A living example is introduced to validate the accuracy of correctio prevent illegal information leakage an n. The results show that our improvement access control rules can d enhance the security of the system on the premise ofavailability andflexibility.

关 键 词：BLP 修正 机密性 可用性 SLCF 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]