【摘要】 为满足访问控制策略安全性快速判定的要求,提出一种基于谓词抽象和验证空间划分的访问控制策略状态空间约减方法,将在访问控制策略原始状态机模型上的安全性分析工作转移到包含较少状态的抽象模型上,并进一步划分抽象模型的验证空间,以提高效率。理论分析和实验数据均表明,其安全性分析所需的时间和空间都得到有效约减。与传统方法相比,它具有速度更快、自动化程度更高等优点。更多还原

【Abstract】 In order to implement security analysis of access control policy rapidly,predicate Abstract with verification space division was presented,i.e.transfer pristine state machine model analysis to Abstract state machine model which contains fewer states.Furthermore,verification space division was introduced to decrease the dimensions of model checking.Endorsed by both theoretic analysis and experiment,time and space requirement are effectively reduced.Compared with the known methods,our methodology is more efficiency and less human interacted.更多还原