特权约束系统职责隔离问题研究.pdf

1SSN 计算机研究与发展 1000．1239|CN11—1777|TP of Researchand JournalComputer Development 特权约束系统职责隔离问题研究 蔡嘉勇1’2’5卿斯汉1’2’3’4刘 伟h2’5 1(中国科学院软件研究所基础软件国家工程研究中心北京100190) 2(中国科学院软件研究所信息安全技术工程研究中心北京100190) 3(北京大学软件与微电子学院北京102600) 4(北京中科安胜信息技术有限公司北京100086) 5(中国科学院研究生院北京100049) (jiayon902@los．cn) of in Separation DutyPrivilegedOperatingSystems Cai LiuWeil·2，5 Sihanl，2，3一，and Jiayon91·2一，Qing 1(National ResearchCenterFundamental Engineering for Software，Institute ofSoftrvare，ChineseAcademyof 100190) ResearchCenter 2(Engineering forInformation ofSoftware，Chineseof SecurityTechnology，Institute Academy 100190) 3(School and ofSoftware 102600) Microelectronics，PekingUniversity，Beijing 100086) 4(BettingZhongkeAnshengCorporationofInformationTechnology，BeOing 5(Graduate Chinese Universityof AcademyofSciences。Beijing100049) AbstractIn isusedtocontrolthemost resourcesand systems，privilege important functions，SO operating administratorsmustenforce of ensure this separationduty(SoD)to safety．In privilege paper，how would SoDisstudied theissueof authorization．Thesourceof privilegesupport byanalyzing implicit isfirst discussed，andthedefinitionof is intorestrictionrulesandexecution privilege privilegedecomposed rules．Theexecutionru[es theeffectsof are mostaccess