Dynamic Enforcement of the Strict Integrity Policy

• 作者: LIANGHongliang SUNYufang ZHANGXiangfeng
• 来源期刊: 电子学报(英文版)
• 学科: 工学
• 关键词: 信息安全 信息完整 SIP DESIP
• 年，卷（期）: 2005,（1）
• 页码范围: 49-53
• 页数: 5页
• 分类号: TN918
• 语种: 中文

摘要

The Strict integrity policy (SIP) in Biba''''s integrity model is widely used in protecting information integrity, but the static integrity labels of both subjects and objects increase compatibility cost of applications and might prevent some operations that are indeed harmless.In order to improve compatibility, Dynamic enforcement of the Strict integrity policy (DESIP) is put forward. The current integrity label attribute of a subject in SIP is replaced with two attributes in DESIP, which are used to confine dynamically the range of objects a subject could be allowed to access. The new rules of access control in DESIP are given for each kind of access mode (observe,modify and invoke) together with the proofs of their valid-ity. Comparison between SIP and DESIP shows that after a sequence of operations, a subject controlled by DESIP tends to behave in a similar way as it is controlled by SIP and DESIP is more compatible than SIP.