访问控制研究综述

Survey of Acess Control

访问控制技术是实现安全操作系统的核心技术。它通过控制用户对系统信息资源的访问,来达到系统信息资源的保密性和完整性。文章对访问控制近年的研究状况和成果做了一个综述,首先介绍了两个基本理论模型,然后讨论了访问控制主要的安全策略和实现技术及其优缺点,最后对访问控制研究的发展趋势进行了展望。

Access control technology is one of the key issues to concern in developing secure operating system. By controlling the user's access to information and resource, access control ensures the confidentiality and integrity of system. This paper presents a survey on recent researches of access control. Two fundamental theoretical models are investigated. Meanwhile, some security policies and implementation approaches as well as their advantages and disadvantages are discussed. Furthermore, the trends of the research of access control are predicated.