An Approach to Enforcing Clark-Wilson Model Based on Type Enforcement

HE Jian-bo; GUO Xin; QING Si-Han

您当前的位置：

首页 >

文章列表页 >

An Approach to Enforcing Clark-Wilson Model Based on Type Enforcement

更新时间：2025-07-16

- An Approach to Enforcing Clark-Wilson Model Based on Type Enforcement
- Acta Electronica Sinica Vol. 36, Issue 2, Pages: 216-223(2008)
- 作者机构：
  
  1. 中国科学院信息安全技术工程研究中心,北京,100080
  2. 北京大学软件与微电子学院,北京,102600
  3. 北京城市学院计算机实验教学中心,北京,100083
  4. 中国科学院信息安全技术工程研究中心北京,100080
  5. 北京大学软件与微电子学院北京,102600
  6. 北京城市学院计算机实验教学中心北京,100083
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP309
- Published：2008
- 稿件说明：
移动端阅览
HE Jian-bo, GUO Xin, QING Si-Han. An Approach to Enforcing Clark-Wilson Model Based on Type Enforcement[J]. Acta Electronica Sinica, 2008, 36(2): 216-223.
DOI：

HE Jian-bo, GUO Xin, QING Si-Han. An Approach to Enforcing Clark-Wilson Model Based on Type Enforcement[J]. Acta Electronica Sinica, 2008, 36(2): 216-223. DOI：

摘要

分析了当前Clark-Wilson完整性模型实现机制的不足

提出了一种基于TE实现Clark-Wilson模型的方法.首先讨论了TE对Clark-Wilson模型的支持能力

然后给出了用TE实现Clark-Wilson模型的配置规则和约束.在实现中

扩展了模型的(userid

list of CDIs)三元组

引入了角色层

以更实用的方式实现了职责隔离.同时

实现机制实现了对TP的保护

有效地保障了TP功能的正确性

提高了系统正确控制TP操作的可信度

减少了对Clark-Wilson模型验证规则的依赖.

Abstract

This paper analyzes the limitations of current implementation technologies to Clark-Wilson integrity model

and presents an approach to enforcing Clark-Wilson model based on Type Enforcement.Firstly

the advantages of this approach are discussed.Secondly

the configuration rules and constraints that implement Clark-Wilson model based on TE are given.The triple (userid

list of CDIs) of Clark-Wilson model is extended and replaced by the quarter-tuple (userid

role

list of CDIs)

which implement the separation of duty principle more practically.In addition

the protection of TP is covered by the TE

which ensures the correct functionality of TP

enhances the degree of confidence that TP function correctly

and releases the dependency on the certification procedure.

关键词

Keywords

references

Views

943

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

The Authentication Protocol for Civil Navigation Message D2 of Beidou II Based on Identity Signature

A Formal Commercial Secure Policy Model Based on Framework

Local Storage of Reputation Without the Third Parties to Validate Integrity in Peer-to-Peer Environments

Research and Implementation of the Protection Mechanism for Digital Evidence Collecting System

Security Extension of Border Gateway Protocol BGP-4

Related Author

YANG Yi-ming

ZHANG Yun

WU Zhi-jun

QING Si-han

ZHOU Yong-bin

WEN Hong-zi

YANG Nian-hua

SUN Hua

Related Institution

School of The Electronic Information and Automation, Civil Aviation University of China

Graduate SchoolChinese Academy of SciencesBeijing 100039China

State Key Laboratory of Information SecurityInstitute of SoftwareChinese Academy of SciencesBeijing 100080China

Engineering Research Center for Information Security TechnologyInstitute of SoftwareChinese Academy of SciencesBeijing 100080China

Graduate School Chinese Academy of Sciences

⁰