终端行为可信评估及其访问控制方法研究

Research on Behavior Assessment and Access Control for Terminal

针对开放网络环境下重要信息系统资源高安全等级的访问控制需求,提出一种基于环境度量和行为评估的访问控制模型,该模型基于环境信任度对终端计算环境进行安全分级,基于多实体贝叶斯网络综合用户行为的多种属性对用户行为实施动态评估,整合了环境可信度和行为模式、资源访问、系统运行状态等行为表现属性,能较全面地对用户行为进行评估;模型采用条件规则和授权规则相结合的安全规则,实现对资源访问行为动态的访问控制.与现有的模型相比,提出的访问控制模型能够更好地适应环境的多变性和用户行为的复杂性,信任评价方法更具有可计算性和合理性.

To meet the high level of security access control requirements in critical information systems in open network environment, proposed an access control model based on environment and behavior assessment. The model classified the security of terminal envi- ronment based on environmental measurements, and assessed user behavior combined of variety of behavior properties based on Multi- Entity Bayesian Network. Integrated the attribute of behavior representation with environmental measurements, behavior model, re- source access, status of system running, etc., User behavior can he accessed in the round. Using security rules combined of the con- dition rules and authorization rules achieved dynamic access control for resources access. Compared with existing models, the pro- posed access control model was better able to adapt to the complexity of the environment and variability of the users＇ behavior. The trust evaluation method is more computational and rationality.