动态多级安全级模型及其应用

Dynamic multilevel security model and its application

针对采用传统MLS模型实现的系统可用性和灵活性较低的问题,提出了一种基于动态安全级的MLS模型Dynamic MLS。模型使用由流入信息最高安全级和流出信息最低安全级组成的动态安全级代替传统BLP模型中的当前安全级,并依此对主体访问客体的行为进行更灵活的控制。模型在BLP模型11条规则的基础上对其中的5条规则进行了改进,并通过形式化方法证明了改进模型的正确性。最后给出了模型在增加linux系统安全性方面的应用。

This paper gives a multilevel security model based on dynamic security level named Dynamic Multilevel Security （DMLS） model.DMLS uses a couple of dynamic security levels of highest inflow and lowest outflow to replace the current security level of BLP model.With these dynamic security levels,DMLS can control the access of subjects to objects flexibly.In order to use the dynamic security level,DMLS makes a corresponding changes to the five of eleven rules of classic BLP model and the model is proved to be correct through formal methods.At last an application of DMLS to enhance security of linux is given.