A Mandatory Access Control Framework in Virtual Machine System with Respect to Multi-level Security I: Theory

查看全文 作　　者：LIU Qian WANG Guanhai WENG Chuliang LUO Yuan LI [1]Minglu

机构地区：[1]Department of Computer Science and Engineering, Shanghai Jiao Tong University, Shanghai, 200240, China

出　　处：《China Communications》索引2010年第7卷第4期,共7页

基　　金：Acknowledgements This work was supported by National Key Basic Research and Development Plan (973 Plan) of China (No. 2007CB310900) and National Natural Science Foundation of China (No. 90612018, 90715030 and 60970008). 摘　　要：At present,there are few security models which control the communication between virtual machines (VMs).Moreover,these models are not applicable to multi-level security (MLS).In order to implement mandatory access control (MAC) and MLS in virtual machine system,this paper designs Virt-BLP model,which is based on BLP model.For the distinction between virtual machine system and non-virtualized system,we build elements and security axioms of Virt-BLP model by modifying those of BLP.Moreover,comparing with BLP,the number of state transition rules of Virt-BLP is reduced accordingly and some rules can only be enforced by trusted subject.As a result,Virt-BLP model supports MAC and partial discretionary access control (DAC),well satisfying the requirement of MLS in virtual machine system.As space is limited,the implementation of our MAC framework will be shown in a continuation. 关键词：通信技术安全模式控制权虚拟机系统

相关文献

参考文献（8）
引证文献（1）
耦合文献（67）

参考文献(8)

引证文献(1)

耦合文献(67)

互联网出版许可证新出网证(渝)字10号全国400电话 - 免长途话费

A Mandatory Access Control Framework in Virtual Machine System with Respect to Multi-level Security I: Theory

参考文献(8)

引证文献(1)

耦合文献(67)

用户提示