一种基于BLP模型的访问控制设计方案

SCHEME OF ACCESS CONTROL BASED ON BLP MODEL

操作系统作为信息系统的基础,其安全性不容忽视。实现操作系统的安全性需从多方面考虑。访问控制是实现操作系统安全的重要手段。文章从规范系统内的信息流向出发,引用经典的BLP安全模型,制订了1个小型系统的访问控制设计方案。方案以访问动作为控制对象,着重体现了BLP模型所要求的机密性,同时也对完整性有所考虑。

As the base of the information system, operating system is very important, especially it＇s security. Access control, one of several ways which can reinforce our OS, is a primary way to realize the objective. In the article, Classical BLP Model was introduced to confine the flow of information in order to implement one scheme of AC. Using the operating action as object of control, the scheme pay much attention to the confidentiality of BLP Model, and also give consideration to the integrity.