Multilevel secure access control policy for distributed systems

Ming-xin MA; Guo-zhen SHI; Ya-qiong WANG; Hao-jie WANG; Wen-wen CHENG

doi:10.11959/j.issn.2096-109x.2017.00184

您当前的位置：

首页 >

文章列表页 >

Multilevel secure access control policy for distributed systems

Papers | 更新时间：2024-06-03

- Multilevel secure access control policy for distributed systems
- Chinese Journal of Network and Information Security Vol. 3, Issue 8, Pages: 28-34(2017)
- 作者机构：
  
  1. 西安电子科技大学网络与信息安全学院，陕西西安 710071
  2. 北京电子科技学院信息安全系，北京 100070
  3. 西安电子科技大学通信工程学院，陕西西安 710071
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2017.00184
  CLC： TP309
- Online First：2017-08，
  
  Published：15 August 2017
- 稿件说明：
移动端阅览
Ming-xin MA, Guo-zhen SHI, Ya-qiong WANG, et al. Multilevel secure access control policy for distributed systems[J]. Chinese Journal of Network and Information Security, 2017, 3(8): 28-34.
DOI：

Ming-xin MA, Guo-zhen SHI, Ya-qiong WANG, et al. Multilevel secure access control policy for distributed systems[J]. Chinese Journal of Network and Information Security, 2017, 3(8): 28-34. DOI： 10.11959/j.issn.2096-109x.2017.00184.

摘要

针对分布式信息系统的资源共享及安全互操作问题，在多级安全模型基础上加入管理平台和中间件模块，提出一种适用于分布式系统的多级安全访问控制策略，保证数据机密性和访问过程安全可控。用XACML语言对安全策略进行标准化描述，并对策略进行安全性和灵活性分析。

Abstract

A multilevel secure access control strategy for distributed system was proposed

which could guarantee the data confidentiality and security

through adding platform and middleware modules.The security policy was described in the XACML language

and the security and flexibility of the policy were analyzed.

关键词

Keywords

references

CHANDY K M , LAMPORT L . Distributed snapshots:determining global states of a distributed system [J ] . ACM Transactions on Computer Systems , 1985 , 3 ( 1 ): 63 - 75 .

BELL D E , PADULA L J L . Secure computer system:unified exposition and multics interpretation [J ] . Secure Computer System Unified Exposition ＆ Multics Interpretation , 1976 .

ISO 7498-2:1989(en) [S ] .

李凤华 , 殷丽华 , 吴巍 , 等 . 天地一体化信息网络安全保障技术研究进展及发展趋势 [J ] . 通信学报 , 2016 , 37 ( 11 ): 156 - 166 .

LI F H , YIN L H , WU W , et al . Research status and development trends of security assurance for space-ground integration information network [J ] . Journal of Communications , 2016 , 37 ( 11 ): 156 - 166 .

WOO T Y C , LAM S S . Authorization in distributed systems:a formal approach [C ] // IEEE Computer Society Symposium on Research in Security and Privacy . 1992 : 33 - 33 .

BLAZE M , FEIGENBAUM J , LACY J . Decentralized trust management [J ] . Proceedings of IEEE Conference security ＆ Privacy , 1996 , 30 ( 1 ): 164 - 173 .

Blaze M . The KeyNote Trust-Management System Version 2 [J ] . At＆ T Research Labs , 1999 .

李甲帅 , 彭长根 , 朱义杰 , 等 . 面向 Hadoop 的风险访问控制模型 [J ] . 网络与信息安全学报 , 2016 , 2 ( 1 ): 46 - 52 .

LI J S , PENG C G , ZHU Y J , et al . Risk access control model for Hadoop [J ] . Chinese Journal of Network and Information Security , 2016 , 2 ( 1 ): 46 - 52 .

LIU X T , LI X W , CUI X . Research on trust computing based multilevel security policy [J ] . Electronic Design Engineering , 2016 .

JING S , CHEN X , DU X , et al . Distributed multilevel security core architecture based on noninterference theory [J ] . Journal of Computer Applications , 2013 , 33 ( 3 ): 712 - 716 .

SCHUPPEN J H V . Research program for control of distributed and of multilevel systems [M ] // Coordination Control of Distributed Systems . Berlin : Springer , 2015 : 385 - 392 .

BATRA N , SINGH M . Multilevel policy based security in distributed database [M ] // Advances in Computing and Communications . Berlin : Springer , 2011 : 572 - 580 .

ARLEO A , DIDIMO W , LIOTTA G , et al . A distributed multilevel force-directed algorithm [C ] // The International Symposium on Graph Drawing and Network Visualization . 2016 : 3 - 17 .

HUSSAIN S A , FATIMA M , SAEED A , et al . Multilevel classification of security concerns in cloud computing [J ] . Applied Computing ＆ Informatics , 2016 .

eXtensible Access Control Markup Language (XACML) Version 3.0 [S ] . 2013 .

Views

1647

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

No data

Related Author

No data

Related Institution

No data

⁰