基于非传递无干扰理论的二元多级安全模型研究

Research of duality and multi-level security model based on intransitive noninterference theory

提出了一个新的基于非传递无干扰理论的二元多级安全模型,其分别依据BLP和Biba模型的思想保护信息的机密性和完整性。为增强模型的实际可用性,引入了机密性可信域和完整性可信域,其在机密性检查室和完整性检查室内对违反安全策略的操作进行检查。基于信息流的非传递无干扰理论对于该模型进行了严格的形式化描述,并证明了其安全性,近一步讨论了其在Linux操作系统中的实现和在实际中的应用。该研究对于国家信息内容安全基础设施中敏感信息的保护具有一定的理论和实用价值。

A novel duality and multi-level security model （DMLSM） based on intransitive noninterference theory was proposed, which protects confidentiality of information based on BLP model and integrity based on Biba model. To enhance the usability of model, it introduces confidentiality trusted domain and integrality trusted domain which check the operations that violate the security policy in confidentiality check-room or integrity check-room respectively, then allow or refuse the access. The strict formal description of the model based on intransitive noninterference theory of information flow is given; furthermore, it proves the security of the model. The implementation of the model in Linux operating system is discussed and the application of model in practice is also demonstrated. The research gives Some contributes on the protection for sensitive important information and national information content security infrastructure.