基于血统机制的文件系统安全

File system security model based on lineage mechanism

传统的操作系统授权机制,将文件作为孤立的客体进行访问控制,忽略了客体之间的关联所隐含的安全特性,存在诸多安全漏洞。针对此不足,文中用血统来表达文件系统中客体之间的关系,提出了一种基于血统的文件安全模型,并对其性能和安全性进行了分析。

The authorization mechanism of operating systems usually puts importance on access control on the bias of taking a file as an isolated object, but ignores the security relationship between files, which implies many flaws. On the inspiration of describing the relationship between objects by means of lineage, a file lineage security model was presented, and its performance and security characteristics were analyzed.