高级检索

    Biba模型中严格完整性政策的动态实施

    Dynamic Enforcement of the Strict Integrity Policy in Biba's Model

    • 摘要: Biba模型中的严格完整性政策能够有效地保证数据的完整性,但是该政策中主体和客体的完整性标记都是静态不变的,这会限制进程的一些原本合理的活动,从而降低应用程序的兼容性.提出严格完整性政策的动态实施方案,并给出该方案在基于Linux的安全操作系统RFSOS 中的实现.该方案既可以保证系统的完整性,又能提高系统的兼容性.实验证明,这种方案对 系统的整体效率的影响小于1%.

       

      Abstract: While the strict integrity policy (SIP) of Biba's model can be used to maintain integrity of data in computer systems, the integrity labels of both subjects and objects in a system are always kept static in SIP, which might lead to denial to some non-malicious access requirements and hence decreases the compatibility o f applications. Dynamic enforcement of this policy (DESIP) is presented, which c an increase compatibility of software while keeping system integrity as strictly as SIP can. The implementation of DESIP is also given based on RFSOS, a Linux-b ased operating system, which shows that the impact of the enforcement of DESIP o n system efficiency is less than 1%.

       

    /

    返回文章
    返回