G-SIS模型中组成员分级结构的研究

分组安全信息共享技术(G-SIS)作为信息共享技术的一项新的发展,近些年来也取得了许多实践的应用。例如在"网络安全会议"中,以G-SIS模型作为指导,运用分组的思想进行系统设计。但是目前的G-SIS模型在组成员上的局限性已经影响到信息系统的安全,主要表现在只强调主体在群组中的作用,而忽视了客体在群组中的作用,主客体之间的访问限制条件也没有进行相关的说明,不仅对群组的安全性构成威胁而且增加了系统后期授权的计算量。对此,将在目前的G-SIS模型中加入对客体的操作,并且对主客体的分层结构进行说明,用于系统预授权前的初始判断,以完善该模型。

The Research on Layered Structure of Memberships in G-SIS Model

The group security information sharing technology（G-SIS） is a new development in information sharing technology,in recent years has also made many practice applications.Such as in the ＂Network Security Conference＂,which uses the G-SIS model as guidance,get the group theory into the system design.But the limitation of the current G-SIS model have affected the information system security,main performance only focus on the subject in the role of the group,and the role of objects playing in the system being ignored,the restrict access conditions between subject and object have not relevant instruction,not only affect the security of system but also increase the working capacity of authorization later.For these shortcomings,this paper will bring the operations of the object to the current G-SIS model,and illustrate the layered structure of subject and object,which are used for pre authorization before the initial judgment of system,hope to make this model better.