摘要: 如何在安全信息系统中支持多种安全政策是近年研究的热点,该文将多安全政策支持框架分为3个大类:基于统一安全模型的FMP,基于安全属性的FMP和基于政策描述语言的FMP。对典型例子进行了分析和比较,结合真实安全环境的特征提出了今后的研究方向,列举了一种FMP在安全操作系统中实施的实例。
关键词:
访问控制,
多安全政策支持框架,
安全操作系统
Abstract: How to support multi-policy in secure information systems is a research hotspot in recent years. In the paper, FMP(Framework for multi-policy) studies are divided systematically in three classes: FMP based on policy language, FMP based on security attributes and FMP based on uniformed security model. Accordingly, typical FMPs of each class are analyzed and compared, and a research direction is pointed out. A practical case of enforcing FMP in secure OS is described.
Key words:
Access control,
Framework for multi-policy(FMP),
Secure OS
中图分类号:
单智勇. 多安全政策支持框架研究[J]. 计算机工程, 2007, 33(09): 148-150.
SHAN Zhiyong. Research on Framework for Multi-policy[J]. Computer Engineering, 2007, 33(09): 148-150.