• 主题
高级搜索  >
历史搜索 清空历史
首页> 美国政府科技报告 >Linux-Based Approach to Low-Cost Support of Access Control Policies
【24h】

Linux-Based Approach to Low-Cost Support of Access Control Policies

机译：基于Linux的访问控制策略低成本支持方法

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

It is vital to our country's political and economic future to adequately protect corporate and government information from unauthorized disclosure and modification. Unfortunately, the current state of computer security is weak, especially when novice adversaries can perform successful infiltrations of sensitive systems. Systems that enforce Mandatory Access Control (MAC) policies are known to reduce some known security weaknesses, but such systems have seen limited use within the United States Government, and they are rarely applied in the private sector. Some of this limited use is caused by a lack of exposure to systems able to enforce MAC policies. This thesis presents an inexpensive approach to providing a system supporting MAC policies, allowing users an opportunity to have hands on experience with such a system. A detailed design for modifying the Linux operating system is given, allowing for the flexible and simultaneous support of multiple policies. In particular, a design and detailed specification for the implementation of label based interfaces for the mandatory portions of the Bell and LaPadula secrecy model and the Biba integrity model have been developed. Implementation of portions of this design has demonstrated the feasibility of this approach to label based interfaces. This design has potential for widespread use in computer security education, as well as broad application as a component in the ongoing Department of Defense research of trusted computer system interfaces.

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号