基于量化行为的异构数据库强制访问控制方法  

Mandatory Access Control Method for Heterogeneous Databases Based on Quantitative Behavior

作　　者：张峻[1] 阚银环[1] ZHANG Jun;KAN Yin-huan(Zhujiang College,South China Agricultural University,Guangzhou Guangdong 510900,China)

机构地区：[1]华南农业大学珠江学院,广东广州510900

出　　处：《计算机仿真》2021年第8期487-491,共5页Computer Simulation

基　　金：2019年度广东省高等教育教学改革项目(综合类教改项目)(752)。

摘　　要：传统方法在进行异构数据库强制访问控制时,未有效控制授权时间,存在系统占用率过高、访问控制准确性差、授权正确率问题。提出一种量化行为的异构数据库强制访问控制方法解决以上问题。建立用户访问权限关系,根据用户内部角色初步判断是否允许操作;采用量化行为方法对用户的信任度与用户行为的信任度进行量化,定量主体行为属性,并评价访问情况的安全等级,实现了异构数据库强制访问控制。实验结果表明,此次研究的异构数据库强制访问控制方法有效减少了访问控制时的授权时间,减少了系统占用率,提高了授权正确率,证明了文中研究的异构数据库强制访问控制方法的有效性。During the mandatory access control of heterogeneous database,traditional methods lack of effective control of authorization time,leading to high system occupancy,poor access control accuracy and authorization accuracy.Therefore,this paper presents a quantitative behavior of heterogeneous database mandatory access control method.Meanwhile,based on the user’s internal role,the relationship of user’s access rights was established,and it was preliminarily judged whether the operation was allowed.Quantitative behavior was introduced to quantify the trust degree of user and user behavior,the attribute of subject behavior was quantified,and the security level of access situation was evaluated,thus realizing the mandatory access control of heterogeneous database.The results show that the control method has low authorization time and system occupancy,which improves the authorization accuracy and good effectiveness.

关 键 词：量化行为 异构 数据库 强制访问控制 授权 

分 类 号：TP392[自动化与计算机技术—计算机应用技术]