강제적 보안 정책에 기반한 BLP/BIBA 융합 접근 통제 모델 = A BLP/BIBA union access control model based on mandatory security property

다국어 초록 (Multilingual Abstract)

This paper presents union access control model to solve access control model's inconsistency based on the mandatory access control property. We found security definition, rule and axiom by confidentiality and integrity in mandatory access control policy as well as analyzed all union circumstances of access control model. Also, we suggest BLP/BIBA union access control model that can provide mandatory access control model's confidentiality, integrity and availability.

참고문헌 (Reference)

1 엄정호, "유비쿼터스 컴퓨팅 환경을 위한 보안통제가 강화된 접근제어 시스템 설계에 관한 연구" 한국정보보호학회 18 (18): 71-82, 2008

2 J. Cramption, "The Secondary and Approximate Authoriztion Model and Its Application to Bell-LaPadula Policies" 111-120, 2006

3 D. Brewser, "The Chinese wall security policy" 206-214, 1989

4 Sejong Oh, "Task-role-based access control model" 28 (28): 533-562, 2003

5 J.A. Goguen, "Security Policies and security models" 1982

6 Ravi S. Sandhu, "Role-Based Access Control Models" IEEE 38-47, 1996

7 S. Osborn, "Mandatory access control and role-based access control revisited" 31-40, 1997

8 Zhang Xiangfeng, "Dynamic Enforcement of the Strict Integrity Policy in Biba's Model" 42 (42): 746-754, 2005

9 Silvana Castano, "DATABASE SECURITY" ADDISON-WESLEY

10 Bishop, M., "Computer Security:Art and Science" Addison Wesley 2003

11 Warwick Ford, "Computer Communications Security" Prentice Hall

12 Ravi S. Sandhu, "Access Control : Principles and Practice" 9 : 40-48, 1994

13 D. Sutherland, "A model of information" 1986

14 L. Badger, "A domain and type enforcement UNIX prototype" 9 (9): 47-83, 1996

15 D. D. Clark, "A comparision of commercial and military computer security policies" 1987

16 D.E. Denning, "A Lattice model of Secure Information Flow" ACM 19 (19): 236-243, 1976