摘要
中国墙安全模型是商业信息安全领域中的一个重要的安全策略模型,但是它缺少有效的实施模型和机制。研究了侵略型中国墙安全模型的利益冲突关系、数据组织等,分析了基于角色的访问控制(RBAC)模型的控制机制,利用RBAC的"策略中性"原理,配置RBAC实施侵略型中国墙安全模型,并举例配置了拥有5个有利益冲突公司的RBAC模型。通过对RBAC的配置,使得侵略型中国墙安全模型可以更加方便有效地实施。
Chinese Wall security model is an important model of security policy in the field of business information security, but it lacks the effective implementation model and the mechanism.Firstly, this paper studies the conflict of interest relations, database organization, etc. of Chinese Wall security policy-An aggressive model.Then the control mechanism of the RBAC model is analyzed.Furthermore, using ＂the strategy neutrality＂ of the RBAC model, RBAC is disposed to implement Chinese Wall security policy-An aggressive model.Finally, an example to dispose RBAC model is given,in which five compa- nies have the conflict of interest relations.Chinese Wall security policy-An aggressive model can be more convenient and effective by configuring this model on RBAC.
出处
《计算机工程与应用》
CSCD
北大核心
2010年第29期114-116,共3页
Computer Engineering and Applications
基金
江苏省自然科学基金No.BK20080544~~
