一个基于网格环境的安全信息流模型

Security Information Flow Model Based on Grid Environment

网格安全是网格中的一个重要组成部分,它直接影响着网格的发展和网格系统软件的实际应用。为了充分描述网格环境下的信息流动情况,扩展了一般网络环境下的主体、客体,利用客体的组织密级、密级、完整性等级来划分安全类,定义信息流策略,给出了一个基于网格环境的安全信息流模型。经严格的数学证明,新模型满足Denning的信息流模型的有限格和最小上界运算符性质,是合理的、安全的,它是BLP模型、Biba模型对应的信息流模型的扩展,也是一般网络环境下的安全信息流模型的扩展,这对网格安全研究有一定的积极意义。

The grid security is an important component,and it directly affects the development of the grid and the practical application of grid system software.In order to fully describe the information flow based on grid environment,a new security information flow model based on grid environment was given,in which the safety class was divided and the information flow policy was defined by using the organization security classifications,classifications,and integrity grade of the object.In this article,the subject and the object were extended,and the concepts of the decomposition of the subject and object,and of organization security classification were defined.The strict mathematics verification shows that this new information flow model satisfies the character of finite lattice and least upper bound operator of the Denning＇s information flow model,it is reasonable and safe.It is an extension of information flow model contrast to BLP model＇s and Biba model＇s,but also the expansion of security information flow model based on the general network environment,and there has some positive significance for the study grid security.