摘要： 提出了构建一个适用范围广、可移植性好、采用自主和强制访问控制机制并符合BLP多级安全模型的安全Web服务器所应遵循的原则、策略和实现方法。该安全Web服务器具有简单实用、安全功能全、配置灵活和支持多平台等突出的优点，可以同时满足多种应用环境的需要。

关键词: 安全Web服务器, 用户认证, 自主访问控制, 强制访问控制, Apache

Abstract: This paper presents the design principles, policies and implementation methods of a secure Web server, which can be widely used and adapted to most of the OS computing platforms and at the same time can provide effective discretionary and mandatory access control methods conforming to BLP Multi-level security model. The secure Web server is very easy-to-use, practical, flexible and portable. It can provide adequate secure functions to meet diverse application requirements.

中图分类号: 

• TP393.05