操作系统内核的安全访问控制模型研究

A Study on Access Control Model on the Security of Operatin System Kernel

本文在RBAC96模型上做了多次改进并给出一个改进的应用在linux操作系统上的RBAC模型,提出了激活角色集合以满足最小特权原则,将进程和用户做为主体,引入权限三元组来描述权限和客体操作之间关系,最后给出了系统中实现的逻辑结构。

After severel improvement based on RBAC96 Model,an improved linux operating system oriented RBAC model is proposed.In this paper,we have proposed an active-roles set for the principle of least privilege, considered processes and users as subject ,using privilege triples to describe the relationship between privilege , object and operation.At last we have proposed a logical structrue realized in the system.