访问控制研究综述  

Survey of Acess Control

作　　者：赵亮[1] 茅兵[1] 谢立[1] 

机构地区：[1]南京大学计算机科学与技术系,南京210093

出　　处：《计算机工程》2004年第2期1-2,189,共3页Computer Engineering

基　　金：国家"863"计划资助项目(2001AA144010)

摘　　要：访问控制技术是实现安全操作系统的核心技术。它通过控制用户对系统信息资源的访问,来达到系统信息资源的保密性和完整性。文章对访问控制近年的研究状况和成果做了一个综述,首先介绍了两个基本理论模型,然后讨论了访问控制主要的安全策略和实现技术及其优缺点,最后对访问控制研究的发展趋势进行了展望。Access control technology is one of the key issues to concern in developing secure operating system. By controlling the user's access to information and resource, access control ensures the confidentiality and integrity of system. This paper presents a survey on recent researches of access control. Two fundamental theoretical models are investigated. Meanwhile, some security policies and implementation approaches as well as their advantages and disadvantages are discussed. Furthermore, the trends of the research of access control are predicated.

关 键 词：访问控制 安全操作系统 安全策略 

分 类 号：TP316[自动化与计算机技术—计算机软件与理论]