_长城_安全政策的扩充研究及其实现.pdfVIP

11 Vol. 30 No. 11 2002 11 ACTA ELECTRONICA SINICA Nov . 2002 赵庆松, 孙玉芳, 梁洪亮, 张相锋, 孙 波 ( , 100080) : ( Chinese Wall Security Policy, CWSP) . Brew erNash CWSP . ( RoleBased Access Control , RBAC) ( Policy Neutral) , , . RBAC , CWSP , RBAC CWSP . : : TP309 : A : ( 2002) Research and Enforcement of Enhanced Chinese Wall Security Policy ZHAO Qingsong, SUN Yufang, LIANG Hongliang, ZHANG Xiangfeng, SUN Bo ( I nstitute of Sof tware, Chinese Academy of Sci ences , Beij ing 100080, China) Abstract : Chinese Wall security policy ( CWSP) is one of the most important security policies in comm ercial inform ation area. But the CWSP proposed by Brew er and Nash can! t fully meet the practical requ irement . The rolebased access control ( RBAC) , a pol icy neutral model, has recently received considerable attention as a most promising alternative to traditional discretionary access control ( DAC) and m andatory access control ( MAC) models. RBAC and the Chinese Wall security policies are given, and expanded du e to the practical application. The RBACb ased method to expand CWSP is systematically discussed. Thus, the enh anced CWSP ( ECWSP) is presented f irstly. And then the method of conf iguring RBAC to enf orce the ECWSP is system atically studied. Key words: inf ormation security role rolebased access control enh anced Chinese Wall security policy