高级检索

    通用访问控制框架扩展研究

    A Study of Extending Generalized Framework for Access Control

    • 摘要: 通用访问控制框架 (generalizedframeworkforaccesscontrol,GFAC)是经典的多安全政策支持结构 ,但是在实际实施多个安全政策模块之后暴露了它潜在的效率缺陷 通过引入访问决策缓冲器得到扩展的通用访问控制框架 ,并且在RS Linux安全操作系统中完成实现 ,性能测算结果表明 ,扩展后的通用访问控制框架可以有效地弥补效率缺陷

       

      Abstract: Generalized framework for access control (GFAC) is a classical multi policies supporting mechanism, but reveals an underlying efficiency fault after enforcing several policy modules in practice In the paper, a new access control framework based on the GFAC is constructed by introducing an access decision cache It is implemented in a secure Linux and proved to be efficient by experiments

       

    /

    返回文章
    返回