访问控制策略语言—egacpl①-计算机系统应用.pdf

2010 年 第 19卷 第 3 期 计 算 机 系 统 应 用 ① 访问控制策略语言—EGACPL 李 星 李 曦 高妍妍 (中国科学技术大学 计算机科学与技术系 安徽 合肥 230027 ; 中国科学技术大学 苏州研究院 嵌入式系统重点实验室 江苏 苏州 215000) 摘 要： 随着访问控制技术的发展以及安全需求的多样化，访问控制模型的组合应用日益成为安全操作系统设 计的重要目标，由此对策略描述语言提出了统一易用的新要求。通过对现有安全策略语言和访问控制 模型的研究，设计了一种应用于安全操作系统领域的访问控制策略语言 EGACPL(Easily Use and General Access Control Policy language)。EGACPL 采用结构化以及面向对象的设计思想，便于开 发者理解和使用；统一描述策略元素和安全规则，支持多种访问控制模型，体现了良好的通用性。 关键词： 安全操作系统；访问控制；策略语言；面向对象 A Novel Language for Access Control—EGACPL LI Xing, LI Xi, GAO Yan-Yan (Department of Computer Science and Technology, University of Science and Technology of China, Hefei 230027, China; Suzou Institute for Advanced Study, University of Science and Technology of China, Suzou 215123, China) Abstract: With the development of access control technology as well as the diversity of security requirements, the combination of access control model in application is increasingly becoming an important security goal in the design of operating system, which gives new requirements for the unification and case application of the policy description language. Based on the research of the existing security policy language and access control model, this paper presents an access control policy language EGACPL. With the application of structuralized and object-oriented design, EGACPL is easy for developers to understand and use. It unifies the description of policy elements and security rules to support a wide range of access control mo