security models and policies-信息安全概论-课件-02.pptVIP

Copyright ? 2008 by Jingsha He November 25, 2008 Copyright ? 2008 by Jingsha He 1 Introduction to Information Security Prof. Jingsha He School of Software Engineering Beijing University of Technology November 25, 2008 Copyright ? 2008 by Jingsha He 2 Fact of the Lecture Much of bank security relies on the existence of “temper-proof” technologies, either by relying on physical isolation of systems or by building a system that would self-destruct if tempered with. However, temper resistance is almost impossible to achieve in a public environment. November 25, 2008 Copyright ? 2008 by Jingsha He 3 Fundamentals Security Models and Policies November 25, 2008 Copyright ? 2008 by Jingsha He 4 Protection State State The collection of the current values of all the cells of temporary and permanent storages in a system Formal description P: all possible states Q: a subset of secure states Security policy For describing the security states in Q Security mechanism For enforcing a stated policy to prevent a system from entering a state outside of Q, i.e., into P-Q November 25, 2008 Copyright ? 2008 by Jingsha He 5 Access Control Matrix Model Model components An access control matrix M A set of subjects: S Active entities: users, processes, threads, etc. A set of objects: O Protected entities: registers, files, devices, processes, etc. Access rights read, write, execute, own send, receive increment, decrement, etc. Protection state (S, O, M) November 25, 2008 Copyright ? 2008 by Jingsha He 6 An Example of Access Control Matrix Read Control Read Write Own Create Write Send Read Execute Read Execute Receive Reset Stop Resume Update Own Disable Write Hold Create Destroy John Henry Alice Bob File Device Register Process Mary November 25, 2008 Copyright ? 2008 by Jingsha He 7 Dynamics of Protection States State transition Initial state: X0 = (S0, O0, M0) Operations: Π1, Π2, … Xi ├πi+1 Xi+1 State transitions X ├* Y Operations Create subject, create object Enter right, delete right Destr