数据库安全代理系统中访问控制的研究

Research of access control in database security proxy

为了解决如何在保证数据库安全的前提下根据访问场景来动态改变访问控制策略的问题,提出了一个新的安全模型DBLP_ABC模型,该模型集成了强制访问控制(MAC)的安全性和使用控制(UCON)的灵活性,并在此基础上加入了动态特性。将该模型引入数据库安全代理中,可以在保证系统安全性的同时又能够让系统在不同的使用场景作出不同的访问控制,提高了系统的实用性。最后,设计了一个参考监视器来实现DBLP_ABC模型。

To resolve the problem that how to use the dynamic policy of access control on a basis of consolidating the security of database, a new security model named DBLP_ABC with combining the MAC and UCON, the dynamic property added on a basis of this. Using the DBLP_ABC model not only can assure the security of database security proxy, but also can adopt different policy of access control in the different usage scenario. In the end, a reference monitor is designed to realize the DBLP_ABC model.