一个基于分权机制的分布式网络安全系统模型研究

A Distributed Security Model Based on Divide and Rule

1.前言 网络技术飞速发展的今天,网络安全成为普遍关注的重要同题.最为经典的安全模型是Bell Lapadula 模型,该模型以访问控制作为安全防卫的基本防线,把安全系统抽象为安全主体、访问对象和访问控制三大要素.从本质上说,Bell Lapadula模型是一个集中控制模型,我们认为这种集中控制模型在如下三方面存在缺陷:

In this paper, the authors analyze the defects of classical security model and ACL, which is now the most popular used method in access control- Then a new resolution based on 'divide and rule' is discussed and a correspondent security model is depicted. In this model,the security system is divided into three parts: the policy management, the policy execution and the inspection.At last,the new model is compared with the classical one and its strongpoint is presented.