A Mandatory Access Control Model Based on Concept Lattice

摘要

Confidentiality and integrity of information are basic attributes of information security, but the existing access control models cannot unify the both well. A mandatory access control model based on access control concept lattice is proposed in this paper. This model integrates many safe sensitivity labels such as integrity, confidentiality, security category. Thus, mandatory constraints of the access of subject to the object can be realized, and Hasse diagram of lattice can be created automatically, such that security levels of the subject and object in the system can be displayed clearly.