军用安全模型扩展及其应用

在分析基于格理论的信息流控制军用安全模型在实际应用中存在的不足的基础上,从安全类定义和信息流控制策略两个方面对原模型进行了理论扩展和安全性分析.扩展模型安全类在作为对象和主体时具有相同的表达方式,以及在保持原模型信息流关系情况下,允许同职权等级用户交流他们共知的信息,以及高职权等级用户访问低职权等级用户他们之间共知的信息.以数字文档安全管理系统为例对扩展模型应用进行了描述.实例表明扩展模型更适合实际系统对信息流控制的要求.

Extension and Application of Military Security Model

Based on the deficiency analysis of the military security model (MSM), which is information flow control model based on the lattice theory, the MSM is extended in the both sides of the definition of the security class and the control policy of the information flow. The extensive military security model (EMSM) is described through the semi-formalization and its security is analyzed in the theory. The subjects and objects in the EMSM have the same definition, and the common information can flow from the low grade object to the high grade object or between the same grade objects. The application of EMSM is illustrated by the digital document security management system. The result shows EMSM is more adaptive to the information flow control in the real system than MSM.