基于BLP的安全操作系统信息安全模型

BLP-based Information Security Model in Secure Operating System

提出并设计了一个安全操作系统的信息安全模型。该模型消除了仅以用户作为主体存在的不安全隐患,除保密性指标外考虑了完整性指标,限制了隐蔽通道,限制了可信主体以满足最小权限原则,进行了域隔离,缩小了理论模型与实际应用的差距,并应用到自主开发的安全操作系统WXSSOS中。

This paper proposes a security model of secure operating system. The model absorbes the idea in Biba model and RBAC model, and modifies the BLP model to mitigate the security threat. It extends the category of subject in BLP, and considers the integrity aspect except for the confidentiality aspect. Also, covert channels and the trust subject are limited in this model. It is applied in WXSSOS, which is a self-developed secure operating system.