基于无干扰理论的构件系统安全  

Component system security based on non-interference

作　　者：徐明迪[1] 靳朝阳 崔峰 张帆 XU Ming-di;JIN Zhao-yang;CUI Feng;ZHANG Fan(Wuhan Digital and Engineering Institute,Wuhan 430205,Hubei,China;School of Mathematics and Computer Science,Wuhan Polytechnic University,Wuhan 430023,Hubei,China)

机构地区：[1]武汉数字工程研究所,湖北武汉430205 [2]武汉轻工大学数学与计算机学院,湖北武汉430023

出　　处：《山东大学学报（理学版）》2020年第3期35-42,共8页Journal of Shandong University(Natural Science)

基　　金：国家自然科学基金资助项目(61502438)。

摘　　要：研究一种构件系统中多安全等级的信息流无干扰问题。在现有接口结构的基础上,使用安全进程代数描述构件系统动态行为语法和语义来构建接口自动化计算模型。研究基于互模拟的无干扰属性,构造适用于构件系统的接口安全无干扰性质SIA_NI,并证明系统在添加、删除、组合算子等复杂操作下依然满足此安全性。最后举例分析了此无干扰属性在构件化系统中的具体应用,并使用CoPS工具自动检查多安全等级构件系统的安全性,验证接口安全无干扰性质的正确性。Information flow non-interference problem of mutil-level security in components system is studied. The behavior of components with security process algebra(SPA) language is captured to construct interface automata computational model based on the existing interface structure. Some bisimular non-interference properties are analyzed to construct SIA_NI which applies for interface model and is proved security under complex operations such as adding, deleting and combining operators. Finally, an instance is cited to handle this non-interference properties in component-based system and CoPS software is used to automatically verify the correctness of the algorithm on mutil-level security component system.

关 键 词：信息流安全 无干扰 接口安全 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]