计算机工程 ›› 2007, Vol. 33 ›› Issue (09): 148-150.

• 安全技术 • 上一篇    下一篇

多安全政策支持框架研究

单智勇   

  1. (中国人民大学信息学院计算机系,北京 100872)
  • 收稿日期:1900-01-01 修回日期:1900-01-01 出版日期:2007-05-05 发布日期:2007-05-05

Research on Framework for Multi-policy

SHAN Zhiyong   

  1. (Department of Computer, College of Information, Renmin University of China, Beijing 100872)
  • Received:1900-01-01 Revised:1900-01-01 Online:2007-05-05 Published:2007-05-05

摘要: 如何在安全信息系统中支持多种安全政策是近年研究的热点,该文将多安全政策支持框架分为3个大类:基于统一安全模型的FMP,基于安全属性的FMP和基于政策描述语言的FMP。对典型例子进行了分析和比较,结合真实安全环境的特征提出了今后的研究方向,列举了一种FMP在安全操作系统中实施的实例。

关键词: 访问控制, 多安全政策支持框架, 安全操作系统

Abstract: How to support multi-policy in secure information systems is a research hotspot in recent years. In the paper, FMP(Framework for multi-policy) studies are divided systematically in three classes: FMP based on policy language, FMP based on security attributes and FMP based on uniformed security model. Accordingly, typical FMPs of each class are analyzed and compared, and a research direction is pointed out. A practical case of enforcing FMP in secure OS is described.

Key words: Access control, Framework for multi-policy(FMP), Secure OS

中图分类号: