关键词: 内部威胁, 行为监管, 基于用户意图的动态访问控制, 层次分析法

Abstract: In information security field，insider threat has been recognized as a greatly serious issue.Therefore，the monitor aiming at users who have been the legal inside users must be carried out in order to avoid open authorization and insider attack.In this paper，a dynamic users’ intention-based access model is brought forward which rests on the intention that the users submit to control and monitor the inside users’ behavior.Besides Analytic Hierarchy Process（AHP） is used to evaluate the users’ behavior based on the evidence of the monitoring and control the inside users’ behavior according to the evaluation.In the end，simulation has been taken to prove that the solution can improve the accuracy and overcome the disadvantage that analysis can’t be done to the insider users.

Key words: insider threat, behavior monitoring, dynamic intention-based access control, Analytic Hierarchy Process（AHP）