多级安全dbms的通用审计策略模型-软件学报.pdfVIP

1000-9825/2005/16(10)1774 ©2005 Journal of Software 软 件 学 报 Vol.16, No.10 ∗ 多级安全DBMS 的通用审计策略模型 1,2+ 3 1 何永忠 , 李 斓 , 冯登国 1(信息安全国家重点实验室( 中国科学院 软件研究所),北京 100080) 2( 中国科学院 研究生院,北京 100049) 3(上海交通大学 信息安全工程学院,上海 200030) A Generic Audit Policy Model on Multilevel Secure DBMS 1,2+ 3 1 HE Yong-Zhong , LI Lan , FENG Deng-Guo 1(State Key Laboratory of Information Security (Institute of Software, The Chinese Academy of Sciences), Beijing 100080, China) 2(Graduate School, The Chinese Academy of Sciences, Beijing 100049, China) 3(School of Information Security, Shanghai Jiaotong University, Shanghai 200030, China) + Corresponding author: Phn: +86-10ext 803, E-mail: yzhe@is.iscas.ac.cn Received 2004-07-27; Accepted 2004-10-10 He YZ, Li L, Feng DG. A generic audit policy model on multilevel secure DBMS. Journal of Software, 2005,16(10):1774−1783. DOI: 10.1360/jos161774 Abstract: This paper proposes a generic audit policy model on multilevel secure DBMS. The model is powerful expressively which not only expresses audit policy based on periodical time constraints, but also implements audit policy deduction based on rules. Furthermore, fine-grained audit policies are possible in this model with the introduction of object attribute predicate. The decidability of the model is proven and a decidability algorithm is presented. Key words: audit; policy model; multilevel secure DBMS 摘 要: 提出了一种基于多级安全数据库管理系统的通用审计策略模型.该模型具有丰富的表达能力,既可以 表达基于时间的审计策略,也可以实现基于规则的审计策略推衍.通过引入对象的属性谓词,还可以表达细粒度 的审计策略.证明了该模型的可判定性,并给出了判定任意一个事件是否需要审计的算法. 关键词: 审计;策略模型;多级安全数据库 中图法分类号: TP309 文献标识码: A 随着计算机以及网络的普及和广泛应用,信息系统的安全问题也变得越来越严重.虽然有很多安全技术,如