状态控制安全策略研究

Research on security policy about state control

从讨论当前流行的访问控制策略的安全缺陷,及其与状态控制策略的互补性和完备性特征入手,分析了研究状态控制策略的必要性;定义了状态控制安全策略描述形式,并以XML语言为基础,制定策略描述基本规则;同时,按控制目标和控制对象的不同,给出了状态控制策略应用模式;此外,分析了状态控制策略的复杂性问题,并给出初步的解决思路。

By discussing the shortages of access control policy, and analyzing the complementarity and completeness between access control and state control, the necessity of state control was proposed. A formal description about state control policy was defined, and the policy＇s description rules based on XML were regulated. At the same time, according to different control goal and control object, some application patterns for state control policy were provided. In addition, the complexity of state control policy was discussed, and some solutions were provided.