期刊文献+
任意字段
题名或关键词
题名
关键词
文摘
作者
第一作者
机构
刊名
分类号
参考文献
作者简介
基金资助
栏目信息

一种实用动态完整性保护模型的形式化分析 被引量：3

A Practical Dynamic Integrity Protection Model
下载PDF
导出
摘要 从完整性保护模型提出到现在,其成熟度远不如机密性模型.究其原因,完整级划分以及模型实用性是制约其发展的根本因素.从完整性模型的实用性角度出发,归纳总结几种现有完整性保护模型的优缺点,提出了一种实用型的动态完整性保护模型(dynamic integrity protection model,DMIP).它面向Linux系统,解决了完整性级别划分困难以及现有完整性模型可用性不强的问题.针对来自网络的攻击以及本地恶意代码破坏系统完整性等问题给出了保护策略.从与Linux系统及系统中已有的应用程序的兼容性角度出发,DMIP做到了无代价兼容.给出了DMIP模型的不变式和约束,针对模型进行了安全定理的形式化证明,保证了模型的安全性. Since the integrity policy model has been proposed, its maturity has always been lower than that of the confidentiality policy model. The restriction is due to integrity level dividing and usability. In this paper, different kinds of integrity models are summarized from the point of practicability with their characteristics concluded. Based on the previous discussion, this paper presents a practical dynamic integrity protection model called DMIP. It simplifies the intricacy of integrity level dividing and solves the existing problems on practicability of current integrity models especially for Linux. The DMIP is designed to preserve the integrity of system from potential network-based attacks and local malicious files. From the usability of Linux, DMIP improves the current integrity protection models. The paper also shows the invariant and constraint of DMIP model and provides formalization proof in theory.
作者 杨涛 王永刚 唐礼勇 孔令波 胡建斌 陈钟
机构地区 清华大学生命科学学院 北京大学信息科学技术学院 国家计算机网络应急技术处理协调中心 北京交通大学软件学院
出处 《计算机研究与发展》 EI CSCD 北大核心 2013年第10期2082-2091,共10页 Journal of Computer Research and Development
基金 国家自然科学基金项目(61170263,61003230)
关键词 完整性策略 形式化模型 动态完整性级别 实用完整性 动态完整性保护模型 integrity policy formal model dynamic protection model （DMIP） integrity level usable integrity dynamic integrity
分类号 TP309 [自动化与计算机技术—计算机系统结构]
  • 相关文献

参考文献7

  • 1Biba K J. Integrity considerations fur secure coml.mter systems. MTR3153[R]. Bedford, MA.. MITRE, 1977.
  • 2Clark D D, Wilson I) R. A comparison of commercial and military computer securily policies [C] //Proc of The 1987 IEEE Symp on Security and Privacy, I.os Alamitos, CA:IEEEC;omputer Society, 1987:184-194.
  • 3Kargar P A, Austel V, Toll D. A new mandatory security policy combining secrecy and integrity, RC21717 [R]. Westchester County, NY: IBM Research, 2000.
  • 4Fraser T. LOMAC: Low water mark integrity protection for COTS environments [C] //Proc of the 2000 IEEE Syrup on Security and Privacy. l.os Alamitos, CA: IEEE Computer Society, 2000:230-245.
  • 5Li Ninghui, Mao Zhting. Chen Hong. Usable mandatory integrily prolection for operating syslems [C] //Proc of the 2007 IEEE Syrup on Security and Privacy. Los Alamitos. CA : IEEE Computer Society, 2007 :164-178.
  • 6Trusted Information Syslemlnc, Trusted machmathematical model, EDOC 0017 96B [R]. Malden: MA: Blackwell,1996.
  • 7季庆光,卿斯汉,贺也平.一个改进的可动态调节的机密性策略模型[J].软件学报,2004,15(10):1547-1557. 被引量：33

二级参考文献21

  • 1Ott A. Regel-Basierte zugriffskontrolle nach dem Generalized framework for access controlansatz am beispiel Linux. Diplomarbeit Universitat Hamburg, 1997.
  • 2Shi WC. Research on and enforcement of methods of secure operating systems development. [Ph.D. Thesis] Beijing: Institute of Software, The Chinese Academy of Sciences, 2001 (in Chinese with English abstract).
  • 3Mayer FL. An interpretation of refined Bell-LaPadula model for the TMach kernel. In: Proc. of the 4th Aerospace Computer Security Applications Conf. IEEE Computer Society Press, 1988. 368-378.
  • 4Lunt T, Denning D, Schell R, Heckman M, Shockley W. The SeaView security model. IEEE Trans. on Software Engineering,1990,16(6):593-607.
  • 5Bell DE, La Padula LJ. Secure computer system: Unified exposition and multics interpretation. Mitre Report, MTR-2997 Rev. 1,1976.
  • 6Schell RR, Tao TF, Heckman M. Designing the GEMSOS security kernel for security and performance. In: Proc. of the 8th National Computer Security Conf. 1985. 108-119.
  • 7Lee TMP. Using mandatory integrity to enforce commercial security. In: Proc. of the IEEE Symp. on Security and Privacy. IEEE Computer Society Press, 1988. 140-146.
  • 8Clark DD, Wilson DR. A comparison of commercial and military security policies. In: Proc. of the 1987 IEEE Syrup. on Research in Security and Privacy. IEEE Computer Society Press, 1987. 184-238.
  • 9Rushbyc J. Design and verification of secure systems. ACM Operating Sysstem Review, 1981,15(5):12-21.
  • 10Bell DE. Security policy modeling for the next-generation packet switch. In: Proc. of the IEEE Symp. on Security and Privacy.IEEE Computer Society Press, 1988. 212-216.

共引文献32

同被引文献23

引证文献3

二级引证文献4

计算机研究与发展
2013年 第10期

相关作者

内容加载中请稍等...

相关机构

内容加载中请稍等...

相关主题

内容加载中请稍等...

浏览历史

内容加载中请稍等...
;
使用帮助 返回顶部