通用访问控制框架扩展研究

A Study of Extending Generalized Framework for Access Control

通用访问控制框架 (generalizedframeworkforaccesscontrol,GFAC)是经典的多安全政策支持结构 ,但是在实际实施多个安全政策模块之后暴露了它潜在的效率缺陷 通过引入访问决策缓冲器得到扩展的通用访问控制框架 ,并且在RS Linux安全操作系统中完成实现 ,性能测算结果表明 。

Generalized framework for access control (GFAC) is a classical multi policies supporting mechanism, but reveals an underlying efficiency fault after enforcing several policy modules in practice In the paper, a new access control framework based on the GFAC is constructed by introducing an access decision cache It is implemented in a secure Linux and proved to be efficient by experiments