certification of programs for secure information flow（认证的程序安全信息流）.pdf

Operating R.S. Gaines Systems Editor Certification of 1. Introduction Programs for Secure Computer system security relies in part on informa- tionflow control, that is, on methods of regulating the Information Flow dissemination of information among objects through- out the system. An information flow policy specifies a set of security classes for information, a flow relation Dorothy E. Denning and Peter J. Denning defining permissible flows among these classes, and a Purdue University method of binding each storage object to some class. An operation, or series of operations, that uses the value of some object, say x, to derive a value for another, say y, causes a flow from x to y. This flow is admissible in the given flow policy only if the security class of x flows into the security class of y. Prior work on the enforcement o