对军用安全模型的扩展

Extension to Military Security Model

军用安全模型是一种适合于诸如政府部门、军队等涉密组织,信息系统内对信息流进行控制的多级安全模型,原理是依据线性格与子集格的乘积格实施信息流控制的,但所描述的关系在实际应用中存在着缺陷。新模型则利用敏感级格与组织内部的层次格的乘积格反映组织内部带敏感性的“层级”关系,然后再与信息的子集格相乘形成更为合理的访问控制与信息流控制关系,从而使其更适合于军队、政府部门或各类涉密组织的信息系统对信息和信息流的安全控制要求。

The military security model (MSM) is a multilevel security model which used to control information flows within an information system with secret (such as government department, military etc.) . In the old model, it depends on product lattice of linear lattice and subset lattice for information flow control. But relationships described in this model exists drawbacks in applications. In the new model, the product lattice which is a sensitivity lattice multiplying by organization level lattice is mapped to level relations with sensitivity within an organizations. Then, a more proper relationships which is multiplying the product lattice by lattice of information subset are formed for access control and flow control. So it make the new model more suitable to control the information flow security for information systems of military , government departments or various organizations.