一种优化的策略不一致性冲突消解方法  

Optimized approach for resolving policy inconsistency conflicts

作　　者：鲁剑锋[1] 闫轩 彭浩[1] 韩建民[1] 

机构地区：[1]浙江师范大学数理与信息工程学院,浙江金华321004

出　　处：《华中科技大学学报（自然科学版）》2014年第11期106-111,共6页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(61402418,61170108);浙江省自然科学基金资助项目(LQ12F02005,LQ13F020007);浙江师范大学计算机软件与理论省级重中之重学科开放基金资助项目(ZSDZZZZXK23)

摘　　要：针对当静态职责分离策略与可用策略并存时,由于互斥的安全与可用需求可能引发访问控制策略不一致性冲突问题,提出了一种优化的冲突消解方法.该方法基于静态裁剪减少所须考虑的策略数量,通过计算最小冲突覆盖集合以降低问题求解的规模,度量删除每一个静态职责分离策略和可用策略所引发的安全性与可用性损失,并以此评估各个冲突消解方案的优先级.最后给出了一种基于优先级的最大化一致性子基算法.实验结果表明所提出的冲突消解方法综合性能较为理想.Policy inconsistency conflicts may arise between static separation-of-duty(SSoD)and availability policies due to their opposite focuses on safety and availability requirement,in this case,an optimized method for conflict resolving was proposed.Specifically,the method reduced the number of policies that need to be taken into account based on static pruning,computed the minimal cover set to reduce the scale of the problem,measured safety loss and availability loss for each SSoD and availability policy,evaluated the priority for each candidate choice based on safety-availability tradeoff.And a maximum consistency sub-base algorithm was proposed based on priority.The experimental results show that the overall performance of the proposed conflict resolution approach is ideal.

关 键 词：访问控制 静态职责分离 可用策略 策略冲突 优先级 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]