一种结合用户许可的多级安全策略模型-计算机工程.PDF

36 4 2010 2 Vol.36 No.4 Computer Engineering February 2010 ·· 2010 A TP309 450004 BLP BLP Multilevel Security Policy Model Combined with User Permission LU Xiao-liang, YU Bin (Institute of Electronic Technology, PLA Information Engineering University, Zhengzhou 450004) AbstractAiming at the problem that BLP model’s access rule of “no write down” destroy data integrity, subject has most privilege and object holds constant security level, this paper presents a multilevel security policy model combined with user permission. In the model, trusted label is used in subject writing to protect object integrity. User permission solves the problem that subject privilege in BLP model and trusted label has more rights to steal data. By importing arbitration for system administrator, confidential label and trusted label for the modified objects is adjusted dynamically. Theory analysis indicates that the model can assure system security. Key wordssecurity model; trusted label; user permission 1 BLP BLP 2 BLP[1] [2]BLP Biba Clark-Wilson Biba 2.2 Clark-Wilson Biba