【摘要】 为了扩展BLP模型融入完整性,并解决BLP与Biba模型典型融合中的高保密完整性资源与低保密完整性资源互访困难问题,从数学背景乘积格角度分析BLP模型,构造了BLP-I扩展模型.BLP-I模型中标签的第2维分量改为可信级别,通过突出保密性中读操作和完整性中写操作的地位,区分主体和已读信息的可信级,协调了在生命周期内BLP模型的静态特性和Biba模型的动态特性.BLP-I模型以低保密完整性下级可向高保密完整性上级直接汇报,而上级主体可下调自身安全级间接向下级发指令的方式部分解决了互访困难问题.更多还原

【Abstract】 Mutual access dilemma between double-high level and double-low level resources in security and integrity was usually appeared during BLP model expansion with Biba.BLP model expansion with integrity which could resolve this dilemma was represented.An expansion model named BLP-I model was constructed in the view of product lattice analysis since lattice was BLP’s mathematical background.The second dimension of label in BLP-I was substituted to indicate trust level.Read operation in security attribute and write operation in integrity were highlighted.The trust level of subject and messages had been read were distinguished.So the tranquility in BLP and dynamics in Biba during a lifecycle were coordinated in BLP-I.At last,dilemma was partially solved in BLP-I by permitting low security and integrity level direct report to double-high level while permitting double-high level lowered its own security level to issue to its underling.更多还原