CHENG Ge, JIN Hai, ZOU De-qing, et al. Chinese wall model based on dynamic alliance[J]. 2009, 30(11): 93-100.DOI:
基于动态联盟关系的中国墙模型研究
摘要
BN中国墙模型及其诸多变种对写操作约束过强
从而导致在利用冲突关系进行资源划分时
需要事先静态划分访问区域。提出了一种基于动态联盟关系的中国墙模型
该模型通过建立联盟关系实现对利益冲突关系的扩展
从而动态地构建访问区域。证明了该模型能实现与BN中国墙模型相同的安全目标
并通过应用分析展示了该模型可以用于虚拟机系统的隐形流控制。
Abstract
The conflict of interest relation defined in BN Chinese wall model was usually utilized to divide the resources into different access regions.Unfortunately
the Chinese wall model gave much constraint on write permission that the access regions need to be predetermined and divided statically.A modified version of Chinese wall model was proposed to solve this problem.Through establishing dynamic alliance to extend the conflict of interest relation
the objects of different conflict classes could be dynamically divided into different access regions.Finally
a theory was verified that the modified version of Chinese wall model could achieve the same security goal as BN Chinese wall model.The analysis shows that the model can be applied in covert flows confinement in virtual machine system.