基于用户意愿的文件访问控制策略

访问控制是保护计算机上文件安全的重要技术手段。针对文件攻击,提出一种量化的评估方法,对主流访问控制策略进行了量化评估,指出主流访问控制策略的脆弱性在于赋予了程序访问用户能够访问的文件集合的权利。提出一种基于用户意愿的访问控制策略,其风险远远小于主流访问控制策略,能够防御未知文件攻击,证明了策略的安全性质,并讨论了其实现方案。

A File Access Control Policy Based on User's Intention

Access control is an important technique to protect computer files.Aiming at malwares that attack files,the paper proposes a quantified estimation method,and points out that the fragibility of prevalent access control policies lies in authorizing programs to access files what the user can access.The paper novelly proposes an access control policy based-on user's intention,which is able to defend unknown file attacks,and has extraordinarily less risk than prevalent access control policies.Furthermore,the paper proves security properties of the policy presented,and its application is discussed.