基于角色访问控制系统中角色结构安全性分析问题的模型检测验证

RRA-SAP Security Verification Based on Model Checking for RBAC Access Control Systems

提出了一种与角色结构相关的安全性分析问题(RRA-SAP),分析了角色结构对系统安全性的影响,证明了其计算复杂度,采用模型检测技术得到将RRA-SAP转化为模型检测问题的自动化验证算法,并验证了其有效性.结果表明,该算法可以在期望的时间内自动解决RRA-SAP问题.

A new security analysis problem named role-role assignment-security analysis problem（RRA-SAP） was proposed.The impact of role hierarchy changes on security was analyzed,and the computational complexity of this problem proved.An algorithm of translating RRA-SAP into a Model checking formalism was also proposed to do automatic verification,and to prove the feasibility of this method.The experiment shows that this algorithm can automaticly solve RRA-SAP in expected time.