Research on Multilevel Security Model Based on Trustworthy State and Its Application

ZHANG Xiao-fei; XU Fang; SHEN Chang-xiang

您当前的位置：

首页 >

文章列表页 >

Research on Multilevel Security Model Based on Trustworthy State and Its Application

更新时间：2025-07-16

- Research on Multilevel Security Model Based on Trustworthy State and Its Application
- Acta Electronica Sinica Vol. 35, Issue 8, Pages: 1511-1515(2007)
- 作者机构：
  
  1. 中国科学院研究生院信息安全国家重点实验室,北京,100049
  2. 海军装备研究院指挥自动化研究所,北京,100036
  3. 北京工业大学计算机学院,北京,100022
  4. 中国科学院研究生院信息安全国家重点实验室北京,100049
  5. 海军装备研究院指挥自动化研究所北京,100036
  6. 北京工业大学计算机学院北京,100022
- 作者简介：
- 基金信息：
- DOI：
  CLC： TN309
- Published：2007
- 稿件说明：
移动端阅览
ZHANG Xiao-fei, XU Fang, SHEN Chang-xiang. Research on Multilevel Security Model Based on Trustworthy State and Its Application[J]. Acta Electronica Sinica, 2007, 35(8): 1511-1515.
DOI：

ZHANG Xiao-fei, XU Fang, SHEN Chang-xiang. Research on Multilevel Security Model Based on Trustworthy State and Its Application[J]. Acta Electronica Sinica, 2007, 35(8): 1511-1515. DOI：

摘要

本文提出了一种基于可信状态的多级安全模型

它以BLP模型为基础

引入可信度和可信状态测量函数

利用可信计算平台的完整性测量、存储和报告功能

检测进程和被访问对象的可信状态

并针对不同类型访问对象

动态调节进程访问范围

提高模型的抗攻击能力.文中说明了模型的基本设计思想

形式化描述和可信状态转换过程

证明执行新规则后系统仍然处于安全状态.最后

本文还介绍了模型在操作系统内核的实施框架

及其实现性能分析.

Abstract

This paper proposes a multilevel security model based on trustworthy state

which introduces the concept of reliability and the function of integrity measurement.It enforces diverse security rules to different kinds of objects.To prevent running intrusions

the access ranges of subjects are adjusted according to their reliabilities.The formal description of the model and the transform of its trustworthy states are given in the paper.It is proved that the system remains in a secure state after performing the security rules of the new model.Moreover

its realizing framework in operating system kernel is described

and its performance is analyzed.

关键词

Keywords

references

Views

1660

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

On Scheme for Dynamic Determination of Subject's Current Sensitivity Label

Formalization and Verification of Privacy Preserving Protocol Based on User Consent

A CP-ABE Scheme with Cloud Proxy Re-Encryption

Research Progress on Attribute-Based Access Control

Related Author

SHI Wen-chang

LIANG Hong-liang

SUN Yu-fang

MA Li

JIANG Huo-wen

PENG Yun

ZHAO Kai-qiang

KANG Ping

Related Institution

中国科学院软件研究所

中科红旗软件技术有限公司

School of Big Data Science， Jiangxi Science & Technology Normal University

School of Digital Industry， Jiangxi Normal University

Department of Computer Science， Sichuan Normal University

⁰