摘要
强制访问控制常用于多层次安全级别的军事系统中,通过梯度安全标记实现信息的单向流通,可以有效地阻止特洛伊木马的泄露,其缺陷主要在于实现工作量较大、管理不便和不够灵活,究其原因是主体和客体的安全级别很难确定。引入模糊逻辑的思想,提出了基于模糊的强制访问控制模型;根据主体的信任度和客体的重要性,运用模糊综合评判法计算出主体的安全级别和客体的密级,使其能够更好地满足军事系统中访问控制的要求。
Mandatory access control used to apply in military system with multilevel safe rank, which can effectively prevent Trojan horse from leak out by grads security flag to achieve information unilateralism circulation. Limitation rests with realizing complexity, management inconveniently and unskillfully, because of ascertaining hardly subjects＇ and objects＇ security level. The idea of fuzzy logic is introduced, fuzzy-based mandatory access control model is proposed; subjects＇ security level and objects＇ clearance are calculated by exerting fuzzy comprehensive evaluation on the basis of subjects＇ trust value and objects＇ importance, which can satisfied requirements of access control in military system.
出处
《计算机工程与设计》
CSCD
北大核心
2008年第3期595-597,共3页
Computer Engineering and Design
基金
安康学院专项科研计划基金项目(2006AKXY010)
关键词
访问控制
密级
信任度
重要性
模糊综合评判法
access control
clearance
trust value
importance
fuzzy comprehensive evaluation
