摘要
提出一种针对计算机信息系统的主体行为进行可信度量的模型,给出模型的一个实现框架。该模型可以对主体的行为进行可信度量,根据主体行为的可信度使不合法程序和代码无法执行、合法程序和代码无法执行未授权访问,使合法程序和代码的可疑行为受到严格控制,并能根据不同阈值来保证安全性和实用性的合理折中。
A model to measure the trustworthiness of subject’s behaviors is presented, and a frame to realize the model function is given. The principle to measure the trustworthiness of subject’s behaviors is expatiated, which controls suspicious behavior of legal programs and codes. According to the trustworthiness measured out by the model, it can forbid the running of illegal programs and codes, and the unauthorized access of legal programs and codes. It discusses how to get a trade-off between security and practicability with certain security threshold values.
出处
《计算机工程》
CAS
CSCD
北大核心
2008年第7期35-37,共3页
Computer Engineering
基金
国家“863”计划基金资助项目(2002AA1Z2101)
关键词
执行清单
执行描述
可信度量
安全门限
implementation list
implementation description
trustworthiness measuring
security threshold value
