Abstract:Dynamically adjusting the security label of each subject is a main approach to improving the availability of MAC models.It includes the method of security label range and the method of taint propagation.The former lacks the support for a less proviledge subject,and the latter has a known covert channels.In this paper,a model called generalized taint propagation model(GTPM) is proposed to protect the confidentiality and integrity of operating systems.It inherits the least privilege characteristic of taint propagation model(TPM),expands the semantics of TPM to close the known covert channels,and introduces declassification and decontamination capacities of subjects to avoid accumulating contamination.The paper also introduces its specification using communicating sequential processes(CSP) language to clear the formal semantics of a GTPM operating system's behaviors of information flow control;Moreover,the study noninterference with declassification in CSP verification model of process equivalence,and proves that abstract GTPM system have the security property of noninterference with declassification in virtue of FDR tool.Finally,this paper uses an example to demonstrate its improvement of availability.

Hybrid Mandatory Model Composed of BLP and Clark-Wilson Policy

Dynamically modified union model combining confidentiality and integrity

Research on Information Security Model and Security System Design

A Dynamic Cross Domain Access Control Model for Multi-level System

Dynamic Security Access Control Model Based on System Reliability

Handling Dynamic Information Release

A Multilevel Security Model for Private Cloud

Cross‐layer Security Design for Encrypted CPS Based on Modified Security Signalling Game

A Privacy Protection Model on Internal Networks

A Compositional Multiple Policies Operating System Security Model

Multilevel Multi-policy Access Control Model for Collaborative Application

Trust Degree Based Multilevel Security Policy and Its Model of State Machine

L-BLP Security Model in Local Area Network

Separation of Duty Constraint for Permission Based Delegation Model

A Multilevel Security Model Based on Communication Channel Capacity

A Multi-level Security Local Area Network System based on BLP

Configure multi-level security policy using RBAC model

Generalized Taint Propagation Model for Access Control in Operation Systems

A Multilevel Security Model with Credibility Characteristics

Security Analysis of Mandatory Access Control Model

Formal Modeling and Security Analysis for Intra-level Privilege Separation.