多级安全关系数据库系统客体标记粒度问题的研究

The Analysis of the Granularity Problem of Labels Associated with the Storage Object in MLS Relational Database

1.引言 针对信息系统安全性需求的增长,国内外都制订了相应的安全评估和分级标准.这些标准都规定了对系统安全规格、功能等的可靠性和可行性要求,而对涉及具体实现的细节最多只给出指导性的建议.多级(安全)关系数据库系统的客体标记粒度问题就是其中之一.而这个问题的重要性是不言而喻的,对它的透彻研究无论对安全模型和策略的研究者,还是对数据库系统的研究者和开发者以及应用者都具有非常重要的指导和实践价值.

The granularity problem of labels associated with storage object in multilevel relational database which is a bone of contention of the researchers has the direct relationship with the system architecture and work module, and it directly affects the system integrity, evaluate about security, etc. This paper compares and analyzes in detail several applied granularity schema and indicates their characteristic, applicability and involved problems. The researchers with different interesting and intents can adopt different granularity schema to protect the objects in the system for the different application environment.