基于加权熵的访问控制策略安全性分析研究

An Approach for Security Analysis to Access Control Policy Based on Entropy-Weigh

为解决访问控制策略的安全性分析问题,提出了一种基于信息熵的策略量化分析理论.首先,根据信息论中加权熵的知识定义了策略安全熵,提出了非授权访问行为的最大不确定性计算方法.然后,分别给出了典型访问控制策略的一维安全熵和N维安全熵,并对结果进行了证明.最后,依据安全熵分析了典型访问控制策略的安全性.

To resolve the problem of security analysis to access control policy,a quantitative analysis theory is proposed based on information entropy.Firstly,the policy security entropy is defined according to Entropy-Weigh,and computing way for uncertainty of unauthorized access behaviors is bring forward.Then,the security entropy of one dimension and N dimensions of typical policies are given,and the results are proved.Finally,the lackage and change trend of typical policies＇ security are analyzed.