Lattice-Based Access Control Models-英文文献.pdfVIP

IEEE Computer, Volume 26, Number 11, November 1993, p ages 9-19 (Cover article). Lattice-Based Access Control Mo dels1 Ravi S. Sandhu Center for Secure Information Systems Department of Information and Software Systems Engineering George Mason University Fairfax, Virginia 22030 email: sandhu@sitevax.gmu.edu voice: 703-993-1659 fax: 703-993-1638 Abstract The ob jective of this article is to give a tutorial on lattice-based access control mo dels for computer security. The pap er b egins with a review of Dennings axioms for information ow p olicies, which provide a theoretical foundation for these mo dels. The structure of security lab els in the military and government sectors, and the resulting lattice is discussed. This is followed by a review of the Bell-LaPadula mo del, which enforces information ow p olicies by means of its simple-security and ? -prop erties. It is noted that information ow through covert channels is b eyond the scop e of such access controls. Variations of the Bell-LaPadula mo del are considered. The pap er next discusses the Biba integrity mo del, examining its relationship to the Bell-LaPadula mo del. The pap er then reviews the Chinese Wall p olicy, which arises in a segment of the commercial sector. It is shown how this p olicy can b e enforced in a lattice framework. K