基于风险分析的应用系统访问控制模型研究.docVIP

基于风险分析的应用系统访问控制模型研究 高志民1，王声远2 1.北京交通大学 信息安全体系结构研究中心，北京,中国 100044 2.北京大学 软件与微电子学院，北京,中国 102600 1. zhimingao@163.com 摘 要：针对越来越复杂的应用系统，本文提出了一种基于风险分析的访问控制模型，该模型通过风险概念建立了业务目标和访问控制策略间的直接对应关系，以业务流程运营绩效指标作为风险度量的基准，并将风险计算作为访问控制授权决策的约束方程，同时，在最小权限原则和职责分离原则基础上，还给出了“业务-安全”均衡原则，并为之建立了相应授权决策规则。本文的研究成果有助于摈弃“安全或不安全”的二元制授权决策规则，建立适应业务灵活性和互操作性发展的柔性授权决策方法。 关键词：风险分析；访问控制；基于角色的访问控制；基于任务的访问控制 Research on risk analysis-based access control model of application system GAO Zhi-Min1, Wang Sheng-Yuan2 1. Research Centre of Information Security Architecture, Beijing Jiaotong University, Beijing 100044,China 2. School of Software and Microelectronics,Peking University,Beijing 102600 ,China 1. zhimingao@163.com Abstract: Facing to complex application systems, an access control model based on the risk analysis is proposed. The directed connection between the business objectives and the access control strategies is established in the model according to the concept of risk, with business process operational performance indicators as a basis on the risk measurement and the risk calculation as the constraint equation of the access control authorization decision. At the same time, besides the principle of least privilege and the principle of responsibility of separation, the principle of business-security equilibrium is also given, and according to which the appropriate authorization decision rules are also established. The research results in the article aid to establish a flexible decision-making method to adapt to the development of the business flexibility and interoperability, with getting rid of the safe or unsafe dual authorization decision rule. Keywords: risk analysis; access control; role-based access control; task-based access control 近四十年来，针对访问控制模型和实现机制研究一直是信息安全领域的主要内容之一，尤其是当前“无实体不可数字化”的信息化时代，政府管理、经济运作、社会生活等均离不开相应的应用系统，而确保应用系统中的用户得到合理的授权，降低权限滥用的可能性及其影响，一直是信息安全的重点。回顾访问控制发展历程，其模型要素总体上与当时人们对应用系统的期望功能及其复杂程度相一致。 在这期间，众多研究者提出了很多访问控制模型。访问控制作为一种安全策略，最早出现在20世纪70年代初期的分时系统中，模型中包含授权决策的基本要素（S