基于扩展客体层次结构的安全数据库策略模型-中国科技论文在线.PDFVIP

∗ 基于扩展客体层次结构的安全数据库策略模型 + 程万军 , 张 霞, 刘积仁 (东北大学 计算机软件国家工程研究中心,辽宁 沈阳 110004) A Secure Policy Model for Secure Database System Based on Extended Object Hierarchy + CHENG Wan-Jun , ZHANG Xia, LIU Ji-Ren (National Engineering Research Center for Computer Software, Northeastern University, Shenyang 110004, China) + Corresponding author: Phn: 86-24 Fax: 86-24 E-mail: chengwj@ Received 2002-06-06; Accepted 2002-11-22 Cheng WJ, Zhang X, Liu JR. A secure policy model for secure database system based on extended obje ct hierarchy. Journal of Software, 2003,14(5):955~962. /1000-9825/14/955.htm Abstract: Security policy model is the groundwork for secure or trusted system. Bell-LaPadula model with its good adaptability has comprehensive applications to multilevel security system, but it is short of the rules about integrity and consistency. Based on that model, an extended policy model is proposed, which is founded on the extended object hierarchy. By this way, the integrity becomes one of the inherence properties of the model. The object domains, extended security axioms and operation rules are also introduced or redefined. The proposed model more suits the requirements of multilevel security databases, and guarantees the consistency among policy model, system specification and other high-level security model. The extensions and enhancements, especially other properties besides security, are the necessary steps for transforming a policy model into a pr