【摘要】 通过分析单一访问控制模型的局限及电子政务应用的安全需求,提出了一种多策略访问控制方法(MACM).该模型充分利用已有访问控制模型的优点,同时考虑进程的可靠性以及系统的可用性,给出了新模型的形式化描述,并在Linux内核上进行实现.性能分析表明,该方法对系统效率影响很小.更多还原

【Abstract】 A new access control method,called Multi-policy Access Control Model(MACM),was proposed by analyzing the limitations of single security model and the security requirements of electronic government applications.The new method makes use of virtues of single security model,and at the same time the system’s reliability and availability are taken into account. The formal description of the new method was given and its implementation on Linux kernel was investigated.The performance tests show that there is little overhead introduced by the method.更多还原