一种面向MILS的多级安全文件系统的架构设计

Architectural Design of Multi-level Security File System Based on MILS

提出一种基于MILS(Multiple Independent Levels of Security,多级独立安全)高可靠架构的多级安全文件系统架构。文件系统应用分区与其他分区间的通信采用严格的两级消息处理机制,MMR组件进行消息路由,Guard组件执行安全策略检查。并提出目录视图的概念确保文件对不同等级用户的透明性。

A highly reliable multi-level security file system scheme based on multiple independent levels of security（MILS） is proposed.Two-level message processing mechanism is adopted to implement the communication between file system application partition and other partitions.MMR can implement message router while guard implement security policy check.Directory view is proposed to make sure the transparency of different levels users.