信息系统安全策略研究

Security Policies Study for Information Systems

安全策略是信息系统安全的关键 .信息系统安全的前提是确保安全策略的完备、正确和一致 .安全策略的复杂性与系统本身的复杂程度密切相关 .安全策略必须得到有效的实施 .本文对安全策略的实施、要求和一致性进行了研究 。

Security policies are the key to the security of information systems. It is the precondition for the security of information systems to assure the completeness, correctness and consistency of security policies. The complexity of security policies is closely related to the degree of complexity of a system itself. Security policies must be enforced effectively. The following is studied: the enforcement of policies, the requirement for policies, and the consistency of policies. Especially a theorem is given for the consistency of access control policies and a method used to check the consistency is presented.