Hybrid mandatory model composed of BLP and Clark-Wilson policy

Computer Engineering and Applications ›› 2011, Vol. 47 ›› Issue (5): 65-68.

• 研发、设计、测试 • Previous Articles Next Articles

Hybrid mandatory model composed of BLP and Clark-Wilson policy

CHEN Jin，LV Hongbing，PAN Xuezeng

College of Computer Science and Technology，Zhejiang University，Hangzhou 310027，China

Received:1900-01-01 Revised:1900-01-01 Online:2011-02-11 Published:2011-02-11

基于BLP和Clark-Wilson策略的混合强制模型

陈进，吕红兵，潘雪增

浙江大学计算机科学与技术学院，杭州 310027

Abstract

Abstract: The BLP can guarantee the security of information by allowing downward information flow from the low security level to high security level.However，under some circumstances，the upward information flow is also necessary.Clark-Wilson model is used to control and audit subject’s state transition and run time adjustment of low-water-mark policy parameters.This paper proposes a model that allows the upward information flow in the control of Clark-Wilson model.The model is proved secure and applicable.

Key words: information security, Bell-LaPadula（BLP） model, Clark-Wilson model, mandatory access control

摘要： BLP模型通过允许低安全级别到高安全级别的信息流动，保证了信息的机密性。但是不能解决普遍存在的下向信息流。而Clark-Wilson模型通过可监控的状态转换提供了完整性保护。提出的模型以BLP控制策略为基础，并在Clark-Wilson模型的监控下，允许下向信息流的流动。证明了该模型是安全的，可行的。

关键词: 信息安全, BLP模型, Clark-Wilson模型, 强制访问控制

CHEN Jin，LV Hongbing，PAN Xuezeng. Hybrid mandatory model composed of BLP and Clark-Wilson policy[J]. Computer Engineering and Applications, 2011, 47(5): 65-68.

陈进，吕红兵，潘雪增. 基于BLP和Clark-Wilson策略的混合强制模型[J]. 计算机工程与应用, 2011, 47(5): 65-68.

[1]	WANG Tong, ZHU Minling. Study on Fast Realization of Serial Test and Approximate Entropy Test [J]. Computer Engineering and Applications, 2020, 56(15): 113-117.
[2]	LV Congdong. Relation between IP-secure and TA-secure in intransitive non-interference [J]. Computer Engineering and Applications, 2018, 54(8): 78-84.
[3]	XU Guoyu, MIAO Xuna, ZHANG Junfeng, JIANG Tao, MA Xiaofei. Review of implicit authentication for mobile devices [J]. Computer Engineering and Applications, 2018, 54(6): 19-25.
[4]	ZHAO Hongda, QI Yong, LI Qianmu. Ubiquitous network security risk assessment modeling based on COOPN [J]. Computer Engineering and Applications, 2018, 54(4): 122-127.
[5]	GAO Zhifang, SHENG Guanshuai, PENG Dinghong. Information security risk assessment method based on compromise rate method [J]. Computer Engineering and Applications, 2017, 53(23): 82-87.
[6]	GUAN Xin, GUO Junping, WANG Xing. Double fuzzy information security evaluation algorithm based on improved DS theory [J]. Computer Engineering and Applications, 2017, 53(2): 112-117.
[7]	CHEN Yu, WANG Yadi, WANG Jindong, LI Tao. Study of influence on information security risks by delays of security measures [J]. Computer Engineering and Applications, 2017, 53(19): 118-123.
[8]	LIN Xianning. Selection method of information security system based on hesitant linguistic Heronian geometric operator [J]. Computer Engineering and Applications, 2017, 53(13): 174-180.
[9]	LU Yang, GAO Bao. Research on file integrity checking based on CityHash for e-government websites [J]. Computer Engineering and Applications, 2016, 52(4): 104-109.
[10]	CHEN Yu, WANG Yadi, WANG Jindong, WANG Kun. Method for information system risk management based on Markov logic networks [J]. Computer Engineering and Applications, 2016, 52(18): 104-110.
[11]	GAO Baojian, ZHANG Ziran, JIN Yuanyuan. OFDM-based information security algorithm [J]. Computer Engineering and Applications, 2012, 48(5): 59-62.
[12]	LIU Jinglei1, CHEN Xiangtao2, HU Hongyu1, AI Lingxian1, JIANG Heng1. Security analysis and improvement on ID-based authenticated key agreement protocol [J]. Computer Engineering and Applications, 2012, 48(34): 88-91.
[13]	GUO Xiechao. Study on genetic algorithm application in information security [J]. Computer Engineering and Applications, 2012, 48(25): 127-131.
[14]	QIAO Xiaolin，ZHANG Jianzhong，LI Rui. Secret sharing scheme among weighted participants based on adversary structure [J]. Computer Engineering and Applications, 2011, 47(7): 82-84.
[15]	WU Yeke1，SONG Rushun1，CHEN Bo2. Comprehensive information security risk assessment based on trapezoidal fuzzy AHP [J]. Computer Engineering and Applications, 2011, 47(34): 111-113.

Hybrid mandatory model composed of BLP and Clark-Wilson policy

基于BLP和Clark-Wilson策略的混合强制模型

PDF

Knowledge

Abstract

Cite this article

share this article

References

Related Articles 15

Recommended Articles

Metrics