摘要
为解决访问控制策略的安全性分析问题,提出了一种基于信息熵的策略量化分析理论.首先,根据信息论中加权熵的知识定义了策略安全熵,提出了非授权访问行为的最大不确定性计算方法.然后,分别给出了典型访问控制策略的一维安全熵和N维安全熵,并对结果进行了证明.最后,依据安全熵分析了典型访问控制策略的安全性.
To resolve the problem of security analysis to access control policy,a quantitative analysis theory is proposed based on information entropy.Firstly,the policy security entropy is defined according to Entropy-Weigh,and computing way for uncertainty of unauthorized access behaviors is bring forward.Then,the security entropy of one dimension and N dimensions of typical policies are given,and the results are proved.Finally,the lackage and change trend of typical policies' security are analyzed.
出处
《电子学报》
EI
CAS
CSCD
北大核心
2013年第1期47-51,共5页
Acta Electronica Sinica
基金
国家973重点基础研究发展计划(No.2011CB311801)
河南省科技创新人才计划(No.114200510001)