信息安全模型的研究及安全系统方案设计

Research on information security model and security system design

在探讨现有信息系统安全模型的基础上 ,分析了信息流模型、Bell- La Padula(BL P)模型和 Biba模型等访问控制模型的优缺点 ,并针对信息安全的现实要求 ,对安全模型进行了改进 .提出了实现安全系统设计的安全、可靠、实用、兼容原则 ;并提供了一个安全系统的具体实现方案和安全系统的组成和功能 ,该安全系统结合强制访问控制、三权分立、安全审计、身份认证和自身安全保护等功能和技术 ,基本达到国家标准三级的安全要求和《TCSEC》标准的 B1级安全要求 ,并已在典型操作系统 Linux和Windows NT上加以设计实现 ,取得了比较好的应用效果 .

After study of existing security models; analysis of information flow model, Bell-LaPadula(BLP) access control model and Biba access control model; and collation and comparison of their advantages and disadvantages, an improved model is put forward that satisfies the actual demands of information security. An implementation strategy is put forward that ensures information security, reliability, practicality and compatibility in the designed security system. An implementation scheme of this security system and its components and functions is provided. This system combines the following functions: mandatory access contro1, privilege separation, security audit, identity authentication and self-protection. It achieves the level 3 of national information security standard and level B1 of TCSEC standard. It was implemented in the Windows NT and Linux operating system and has yielded good resultsin application.