安全策略模型聚合性评估方法.pdfVIP

ISSN 1000-9825, CODEN RUXUEW E-mail: jos@ Journal of Software , Vol.20, No.7, July 2009, pp.1953− 1966 doi: 10.3724/SP.J.1001.2009.03295 Tel/Fax: +86-10 © by Institute of Software , the Chinese Academy of Sciences . All rights reserved. ∗ 安全策略模型聚合性评估方法 1,2,5+ 1,4 1,5 蔡嘉勇 , 卿斯汉 , 刘 伟 1( 中国科学院 软件研究所 基础软件国家工程研究中心,北京 100190) 2( 中国科学院 软件研究所 信息安全技术工程研究中心,北京 100190) 3(北京大学 软件与微电子学院,北京 102600) 4(北京中科安胜信息技术有限公司,北京 100086) 5( 中国科学院 研究生院,北京 100049) Groupability in Security Policy Models CAI Jia-Yong1,2,5+, QING Si-Han1,4, LIU Wei1,5 1(National Engineering Research Center for Fundamental Software, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China) 2(Engineering Research Center for Information Security Technology, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China) 3(School of Software and Microelectronics, Peking University, Beijing 102600, China) 4(Beijing ZhongkeAnsheng Corporation of Information Technology, Beijing 100086, China) 5(Graduate University, The Chinese Academy of Sciences, Beijing 100049, China) + Corresponding author: E-mail: jiayong02@ Cai JY, Qing SH, Liu W. Groupability in security policy models. Journal of Software, 2009,20(7):1953−1966. /1000-9825/3295.htm Abstract : Dynamic policy supporting and authorization granularity are two key issues in access control. Present researches only compared the expressiveness of policies, but never considered the policy’s structure and the granularity of authorization, which makes it difficult to