基于角色访问控制的赛博空间信息安全策略

摘要

The most important measures to reduce the threat of a potential attack is identity authentication of cyberspace user and dynamic fine-grained access control with more and more people paying attention to information security in cyber-space. The information security policy based on role-based access control is proposed from the cyberspace features and the need for security,which is suitable for scalable,heterogeneous and dynamic characteristics of cyberspace security access con-trol and can settle for the need of the cyberspace flexible access control.%赛博空间信息安全问题越来越引起人们的重视，降低潜在攻击威胁的首要措施在于对赛博空间用户的身份认证以及动态细粒度的访问控制上。文章从赛博空间的特点以及安全性需要出发，提出了基于角色访问控制的信息安全策略，适用于以扩展性、异构型和动态性为特性的赛博空间的安全访问控制，满足了赛博空间灵活多变的访问控制的需要。