| 多域环境下具有动态适应性的多级安全模型 |
| |
| 引用本文： | 葛方斌,杨林,王建新.多域环境下具有动态适应性的多级安全模型[J].计算机工程与应用,2008,44(22):124-128. |
| |
| 作者姓名： | 葛方斌 杨林 王建新 |
| |
| 作者单位： | 1.解放军理工大学 指挥自动化学院，南京 210007 2.中国电子系统工程研究所，北京 100039 |
| |
| 摘 要： | 针对BLP模型在实施灵活性方面的不足以及不能满足多域分层系统访问控制需求的实际，提出了BLP的扩展模型——DMDBLP模型。模型中引入了域概念，将访问控制区分为域内和域间两种情况，适应了多域环境的需求。同时，在模型中增加了敏感标记的动态调整机制，提高了访问控制的灵活性。对模型的分析表明，模型的访问控制不仅是灵活的，也是安全的。
|
| 关 键 词： | BLP模型 域 敏感标记 DMDBLP模型 |
| 收稿时间： | 2007-7-23 |
| 修稿时间： | 2008-4-14
|
Multi-level security model with dynamic adaptation in multiple domains systems |
| |
| GE Fang-bin,YANG Lin,WANG Jian-xin.Multi-level security model with dynamic adaptation in multiple domains systems[J].Computer Engineering and Applications,2008,44(22):124-128. |
| |
| Authors: | GE Fang-bin YANG Lin WANG Jian-xin |
| |
| Affiliation: | 1.College of Command Automation，PLA University of Science and Technology，Nanjing 210007，China 2.Institute of China Electronic System Engineering，Beijing 100039，China |
| |
| Abstract: | Because BLP model is deficient in respect of flexibleness of implementation and cannot satisfies access control demand of layer systems with multiple domains，DMDBLP model which is the development of BLP model is proposed.Concept of domain is introduced in the model.Access control is divided into two types—that in a domain and that between domains，which is adaptive for the multiple domains environments.In addition，the mechanism of adjusting sensitivity labels dynamically is appended.The flexibleness of access control is enhanced.The analysis to the model indicates that the access controls of the model are flexible and secure. |
| |
| Keywords: | BLP model domain sensitivity label DMDBLP model |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《计算机工程与应用》浏览原始摘要信息 |
|
点击此处可从《计算机工程与应用》下载全文 |
