基于核电站网络安全的信息流模型

Information Flow Model Based on Network Security of Nuclear Power Plant

为了准确描述从1E子网流入非1E级子网的核电站网络的信息流动,本文给出了一个基于核电站网络安全的新的信息流模型。该模型引入了将子网密级和客体密级相结合的二维密级函数的概念,利用该函数值来划分安全类,用两个客体的函数值定义信息流策略。经过严格的数学证明,新的信息流模型合理且安全,能较好反映核电站网络的安全要求。

In order to precisely describe the information flow from 1E degree to non 1E degree subsets of the network in the Nuclear Power Plant network, a new security information flow mathematics model based on this network is given in this paper. This model incorporated the new concept of the planar-classification function, which combined the classification of the sub-network and the classification of object. Safety classification of the objects was divided based on the function values and the information flow policy is described with the function values of two objects. Strict mathematic verification showed that this information flow model is reasonable and safe, which can reflect the safety requirements of the Nuclear Power Plant network.