基于本體的多域訪問控制策略集成研究.pdf

1、華中科技大學(xué)碩士學(xué)位論文基于本體的多域訪問控制策略集成研究姓名：趙戰(zhàn)西申請學(xué)位級別：碩士專業(yè)：計算機應(yīng)用技術(shù)指導(dǎo)教師：李瑞軒20060508IIAbstractMultidomainsecureinteroperationneedsanintegratedcooperativeunifmsecuremanagement.Thepolicybasedsecuremanagementisalmarkofthedevelopmentinthe

2、securemanagement’sfieldfitsthegoalofthesecuremanagementofmultidomaindistributedsystem.Thesecurepolicyistheceofthepolicybasedsecuremanagement.itcanconstructtheintegratedenvironment.Itguaranteesthepolicyfittingthegoalbyfma

3、lizingcheckingthesecurepolicy.Ontologyisafmalexplicitspecificationofasharedconceptualization.Itisamodelingtoolthatcandescribetheconceptmodelofinfmationsystemonthesemanticscientiallevel.Itcanprovideanewwaytosolvethemultid

4、omainsecureinteroperationproblem.InthesingledomainenvironmentindertocontroltheindirectinfmationflowaHistybasedBLPmodel(HBLP)employstheideaoftheinfmationflowmodeladdsthememialfactinthesystemstatestorecdthereadobjectstocon

5、trolthedirectionofinfmationflow.IndertoimprovetheavailabilitytheinfmationintegrityofthemodeltheHBLPmodelalsoextendsthesecuritylevelofthesubjectsintoseparatedreadingwritingsecuritylevelranges.Byusingthesemethodswedevelopt

6、heBLP(BellLaPadula)ModelintoanewMultilevelSecurityModelwithmemyability.AnimptantacteristicofRoleBasedAccessControl(RBAC)modelisthatitispolicyneutral.WeanalyzethemethodhowRBACcanbeconfiguredtoenfcethesingledomainmodelsinc

7、ludingtheHBLPunifythevariousaccesscontrolmodelsintooneRBACmodel.Weuseontologyitsdeionlanguagetodescribetheaccesscontrolpolicycreateanaxiomaggregation(TBox)toincludetheconceptsproperties.WeusetheALCN(atypeofdeionlogicincl

8、udesthenumberrestrictionsnegationconcepts)tofmalizetheTBox.WealsoanalyzeimprovetheSecureInteroperabilityUsingDynamicRoleTranslation(IRBAC2000)modeltosolveavoidtheproblemsthatarehappenedinthemultidomainintegratedenvironme

9、nt.ThroughtheRulebasedReasoningTechnologywedefinetheserialreasoningrules(Rule)ofmultidomainaccesscontrolmodelenfcetheruleinthemultidomainaccesscontrolenvironment.Finallyasimulatingsystemofthemultidomainsaccesscontrolpoli