一种保持多等级安全策略细化后无干扰属性的方法

A Method to Keep Noninterference in Multi-level Security Policy Refinement

针对多等级架构细化中安全属性(即无干扰属性)保持的问题,提出一个细化函数和若干细化规则。通过细化函数将安全域分解为若干子安全域,通过若干细化规则限定子安全域与其他安全域以及子安全域间需要满足的关系。使用4个定理对细化后的架构或者策略进行形式化的描述和分析,结果表明细化后的架构或者策略仍然保持原架构或者策略的安全属性(即无干扰属性)。

Based on the through study of the problem to keep security in architectural refinement in MLS system,a refinement function and several refinement rules were presented to refine the architecture. The refinement function refined the security domain into several sub-domains. The relation between sub-domain and other security domains and the relation between sub-domains were limited by the refinement rules. Four theorems were given to prove that noninterference remains in the architecture after refinement.