分布式资源安全监控系统模型的研究

为了提高分布式资源的安全性,针对通用操作系统不直接支持强制访问控制的问题,首先对强制访问控制模型进行了研究。在分析基于信息保密性的B e ll-L apadu la模型与基于信息完整性的B iba模型的基础上,提出了分布式资源安全监控系统(D istribu ted resource security m on itoring system,DRSM S)的模型和结构,提出了对分布式安全标签库进行修改的算法。详细介绍了文件资源安全监控系统的设计和关键技术,实现了基于DRSM S模型的资源安全监控原型系统。通过实验,验证了该模型可及时发现并阻断通过非法文件操作进行的入侵企图。实验结果表明:安全监控系统既可保护分布式资源的机密性,又可保护完整性。

Research on Distributed Resource Security Monitor System Model

To improve the security of the distributed resource an MAC model is studied.By analyzing the Bell-Lapadula model based on the information security and Biba model based on the information integrality,the distributed resource security monitoring system(DRSMS) model and the system structure of distributed resource security monitor system are proposed.The algorithm for modifying the distributed security label base is proposed.The design and key realization technique of the document resource security monitor system are introduced.The security monitor prototyping system based on DRSMS model is implemented.Experiments show that DRSMS model can find and interdict invasion attempt from illegal document operation in time and the security monitor system can protect both confidentiality and integrality of the distributed resource.