Abstract: How to support multi-policy in secure information systems is a research hotspot in recent years. In the paper, FMP(Framework for multi-policy) studies are divided systematically in three classes: FMP based on policy language, FMP based on security attributes and FMP based on uniformed security model. Accordingly, typical FMPs of each class are analyzed and compared, and a research direction is pointed out. A practical case of enforcing FMP in secure OS is described.

Key words: Access control, Framework for multi-policy(FMP), Secure OS

摘要： 如何在安全信息系统中支持多种安全政策是近年研究的热点，该文将多安全政策支持框架分为3个大类：基于统一安全模型的FMP，基于安全属性的FMP和基于政策描述语言的FMP。对典型例子进行了分析和比较，结合真实安全环境的特征提出了今后的研究方向，列举了一种FMP在安全操作系统中实施的实例。

关键词: 访问控制, 多安全政策支持框架, 安全操作系统

CLC Number: 

• TP309