11计算机安全_AC4.pptVIP

访问控制表 访问控制机制 Access Control Matrix 访问控制列表Access Control List 能力表Capability based access control 锁和钥匙. Rings-based access control 访问控制列表 Access Control List (ACL). ACM的行. Definition: Let S be set of subjects and R the set of rights of a system. An access control list l is a set of pairs l = {(s, r): s ?S, r ? R} Let acl be a function that determines the access control list associated with a particular object o. Acl(o) = {(si, ri) : 1 ? i ? n} means that subject si may access o using any right in ri. 访问控制列表 ACM的列 file1 file2 file3 Andy rx r rwo Betty rwxo r Charlie rx rwo w ACLs: file1: { (Andy, rx) (Betty, rwxo) (Charlie, rx) } file2: { (Andy, r) (Betty, r) (Charlie, rwo) } file3: { (Andy, rwo) (Charlie, w) } 默认权限 如果许多主体对特定文件具有相同权限 UNICOS: entries are (user, group, rights) If user is in group, has rights over file ‘*’ is wildcard for user, group (holly, *, r): holly can read file regardless of her group (*, gleep, w): anyone in group gleep can write file 文件访问 用户不在文件的 ACL 中，也不在ACL 中的任意的组中: 拒绝访问 ACL 中拒绝用户的访问: deny access 用户拥有：ACL表中该用户的权限的集合 简化的 ACL UNIX: 文件拥有者，组成员，其他用户 简化降低了访问控制的粒度. 用非简化的ACL扩充简化的ACL 简化访问控制表: UNIX 课后阅读： 参考书 UNIX权限管理部分 Unix set userid (suid) … 能力表 能力表capability 是ACM 的行. 定义: Let O be set of objects, and R the set of rights of a system. A capability list c is a set of pairs C = {(o, r): o?O, r ? R} Let cap be function that determines capability list c associated with subject s. Then cap(s) = {(oi, ri):1? i? n} is that subject s may access oi using any right in ri. 能力表 Rows of access control matrix file1 file2 file3 Andy rx r rwo Betty rwxo r Charlie rx rwo w C-Lists: Andy: { (file1, rx) (file2, r) (file3, rwo) } Betty: { (file1, rwxo) (file2, r) } Charlie: { (file1, rx) (file2, rwo) (file3, w) } 能力 能力是访问许可证，类似于票 用户具有一定的对能力表控制能力 OS 负责审查能力表的完整性 否则用户可伪造权利 实现 标签 Bits protect individual hardware words