融合社会情境的访问控制模型及应用  

Access control model integrating social situation and its application

作　　者：鲁乙君 左璐岚 毛岳恒 张志勇 LU Yi-jun;ZUO Lu-lan;MAO Yue-heng;ZHANG Zhi-yong(College of Information Engineering,Henan University of Science and Technology,Luoyang 471023,China;Henan International Joint Laboratory of Cyberspace Security Applications,Henan University of Science and Technology,Luoyang 471023,China)

机构地区：[1]河南科技大学信息工程学院,河南洛阳471023 [2]河南科技大学,河南省网络空间安全应用国际联合实验室,河南洛阳471023

出　　处：《计算机工程与设计》2023年第5期1345-1351,共7页Computer Engineering and Design

基　　金：国家自然科学基金项目(61972133);河南省中原千人计划中原科技创新领军人才基金项目(204200510021);河南省重点科技攻关基金项目(192102210130、202102210162)。

摘　　要：为满足社会性、交互性、动态性极强的各种社交场景应用需求,将在线社交网络与社会情境中的环境、身份、行为、意愿等关键要素相结合,提出一种融合社会情境的访问控制模型SSAC(social situational access control model),在此基础上提出当下社交网络安全热点场景——虚假信息传播控制的访问控制方案。根据用户历史行为,推测用户下一步是否具有传播虚假信息的潜在意图,结合安全策略对其进行细粒度的访问权限控制。通过模型对比分析表明了SSAC模型具有较为全面的访问控制特征,通过原型系统应用验证了该模型的安全性、可用性和优越性。To meet the application requirements of social,interactive and highly dynamic social scenarios,online social networks were combined with key elements such as environment,identity,behavior and desire in social situations.An access control model SSAC(social situational access control model)was proposed,and an access control scheme was put forward for fake information dissemination control in the current hot situation of social network security.Based on the user’s historical behavior,the scheme predicted whether the user had the potential intention to spread false information in the next step,and controlled the user’s access rights with fine granularity combined with the security policy.The model comparison analysis shows that the SSAC model has more comprehensive access control characteristics,and the prototype system application verifies the security,availability and superiority of the model.

关 键 词：在线社交网络 社会情境理论 访问控制模型 虚假信息 历史行为 安全策略 传播控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]