一个支持可信主体特权最小化的多级安全模型-CiteSeerX.PDF

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software, Vol.18, No.3, March 2007, pp .730−738 http://www.j DOI: 10. 1360/jos1 80730 Tel/Fax : +86-10 © 2007 by Journal of Software. All rights reserved. ∗ 一个支持可信主体特权最小化的多级安全模型 1,2+ 1 1 武延军 , 梁洪亮 , 赵 琛 1( 中国科学院 软件研究所 基础软件国家工程研究中心,北京 100080) 2( 中国科学院 研究生院,北京 100049) A Multi-Level Security Model with Least Privilege Support for Trusted Subject 1,2+ 1 1 WU Yan-Jun , LIANG Hong-Liang , ZHAO Chen 1(National Engineer and Research Center for Fundamental Software, Institute of Software, The Chinese Academy of Sciences, Beijing 100080, China) 2(Graduate School, The Chinese Academy of Sciences, Beijing 100049, China) + Corresponding author: Phn: +86-10ext 1010, E-mail: wuyanjun@, Wu YJ, Liang HL, Zhao C. A multi-level security model with least privilege support for trusted subject. Journal of Software, 2007,18(3):730−738. /1000-9825/18/730.htm Abstract: The trusted subject supports of the existing multi-level security models are reviewed and a new model called DLS (discrete label sequence) is proposed. It decomposes the lifecycle of a trusted subject into a sequence of untrusted states (US). Each untrusted state is associated with a certain current security label, and only the predefined trusted request events (TRE) can trigger the transition from one US to the other. Thus, the current security level of a trusted subject is dynamically changed according to its application ’s logic. Definitions of secure states and rules to preserve security are also prese