Security architecture to support multiple security policies based on access control space
|更新时间:2024-10-14
|
Security architecture to support multiple security policies based on access control space
Issue 2, Pages: 107-112(2006)
作者机构:
1. 中国科学院软件研究所
2. 中国科学院软件研究所,北京,100080
3. 中国科学院研究生院
4. ,北京,100039
作者简介:
基金信息:
DOI:
CLC:TP309
Published:2006
稿件说明:
移动端阅览
LI Li-ping1, QING Si-han1, HE Ye-ping1, et al. Security architecture to support multiple security policies based on access control space[J]. 2006, (2): 107-112.
DOI:
LI Li-ping1, QING Si-han1, HE Ye-ping1, et al. Security architecture to support multiple security policies based on access control space[J]. 2006, (2): 107-112.DOI:
Security architecture to support multiple security policies based on access control space
摘要
为解决LSM在策略重用和策略共存方面存在的问题
提出了一个新的安全体系结构ELSM
它引入一个模型组合器作为主模块实施模块堆栈管理和模块决策管理
其中模块决策的实施采用了访问控制空间的策略规范方法
可支持通用性
ELSM的设计及其在安胜OS安全操作系统中的实例分析表明其有效性。
Abstract
In order to solve the problems of policy reusability and policy co-existence in LSM
a new security architecture ELSM is proposed.It introduced Model Combiner as main module to implement module stack management and module decision management.Module decision is based on access control space as policy specification for general support.The design of ELSM and the analysis of its implementation in Ansheng OS prove its effectiveness.