基于行为的访问控制应用于多级安全信息系统

摘要

网络位置探测是基于行为的访问控制模型应用的关键问题之一.给出了ABAC的多级安全信息系统访问控制机制,提出了网络位置探测器架构,描述了网络逻辑位置探测原理以及网络物理位置探测原理,给出了依赖DHCP获取网络逻辑位置的方法与基于SNMP、MIB提取网络物理地址的方法.在此基础上,设计并实现了应用于多级安全信息系统的网络位置探测器,并给出了应用示例.%Network location detection is one of the key issues in applications of action-based access control model. Firstly, the ac-cess control mechanism for multilevel security information systems is proposed. Then, the architecture of network location detec-tor is presented, and the principles for detecting the logical and physical network location are introduced. In this architecture, it depends on DHCP to get logical network location, while it obtains physical network location based on SNMP and MIB. Finally, the network location detector is implemented in a multilevel security information system, and an application is presented.