一种对多级安全模型安全性分析方法.pdfVIP

计算机研究与发展 ISSNN 111777TP J ournal of Comp ut er Research and Develop ment 45 ( 10) : 17 11 17 17 , 2008 一种对多级安全模型安全性的分析方法 司天歌 　谭智勇 　戴一奇 (清华大学计算机科学与技术系 　北京 　100084) ( sit g @t heory . cs. t singhua . edu . cn) A Security Proof Method f or Multilevel Security Model s Si Tian ge , Tan Zhiyong , and Dai Yiqi ( D ep a rtment of Comp ute r S cience an d Technology , Ts i ng h ua Uni ve rs i ty , B eij i ng 100084) Abstract 　So me variant s of BL P mo del can not p rove w het her t heir securit y policie s mat ch multilevel securit y requirement s due to t he limit ation of securit y p roof met ho d of BL P mo del . It i s point ed o ut t hat ba sic securit y t heorem can only show w het her a mo del mat ch it s securit y p rop ertie s. So it i s nece ssary to fin d a new way to for mally analyze t he imp roved BL P mo del s in st ead of u sin g ba sic securit y t heorem a s t he original BL P , e sp ecially w hen t he securit y of t heir imp roved r ule s i s too co mp licat ed to j udge direct ly or w hen t he definition of securit y p rop ertie s ha s been mo dified , w hich i s co n sidered a s t he rea soning ba sic s of ba sic securit y t heorem . In or der to acco mp li sh t hi s , a securit y p roof met ho d i s develop ed w hich t ake s advant age s of a new nonint erf erence mo del an d p rovide s a way to p rove t he securit y of multilevel securit y mo del s f ro m t he p oint of view of infor mation flow . The new nonint erf erence mo del reclaim s t he definition of t ran sitive no nint erf erence relation ship bet ween sy st em actio n s , p re sent s a new unwinding t heorem , an d off er s a great help in exp re ssing dynamic policie s of multilevel securit y mo del s. To show p