基于Biba和Clark—Wilson策略的混合强制完整性模型.pdfVIP

ISSNCODEN RUXUEW E—mail：j0S@iscas．ac．cn JournalofSoftware，Vo1．21，No1，January2010，PP．98—106 http：／w／ww．jos．org．ca doi：10．3724／SP．J．1001．2Ol0．03513 Tel／Fax：+86．10 ◎byInstituteD厂Software，theChineseAcademyofSciences．Allrightsreserved 基于Biba和 Clark—Wilson策略的混合强制完整性模型 周洲仪，，贺也平，梁洪亮 f中国科学院 软件研究所 基础软件 国家工程研究中心，北京 100190) (中国科学院 研究生院，北京 100049) HybridM andatoryIntegrityM odelComposedofBibaandClark—W ilsonPolicy ZHOU ZhouYi，， HEYe．Ping， LIANG Hong．Liang (NationalEngineeringResearchCenterforFundamentalSoftware，InstituteofSoftware，TheChineseAcademyofSciences，Beijing 100190，China) (GraduateUniversity，TheChineseAcademyofSciences，Beijing100049，China) +Correspondingauthor：Em·ail：zhouyi04@ios．cn ZbouZY，HeYP，LiangHL．HybridmandatoryintegritymodelcomposedofBibaandClark—W ilsonpolicy． JournalofSoftware,2010．21(1)：98—106．http：／／www．jos．org．crdl000—9825／3513．htm Abstract： Commercialapplication requires protection of integrity policy．Biba modelprovides a simple multi—levelintegrity：accesscontrolschemebutitneedstheintroductionoftrustedsubjecttoensuretheusability． Clark—Wilsonmodelprovidesacompleteintegrityprotectionbymeansofcontrolledstatetransaction，butitsentire implementationishinderedby itscomplication．ThispaperproposesamodelthatenforcesBibastrictintegrity policyasbasicaccesscontrolmechanism，atthesametimeenforcesBibalow—water—markpolicyontrustedSUbjects accordingtothestateintheirlifecycle．Clark—Wilsonmodelisusedtocontrolandauditsubject’Sstatetransition andurntimeadjustmentoflow—water-markpolicyparameters．Thispapersolvestheusabilityproblemintroduced byBibapoliciesandhighconfiguration burdenandurntimeoverloadintroducedbymassivesupervisingtask of Clark—Wilson，while atthe same timeborrowstheirmerits．Thispolicy composition scheme isproved to be applicableandsecure． Keyword