Abstract:Dynamically adjusting the security label of each subject is a main approach to improving the availability of MAC models.It includes the method of security label range and the method of taint propagation.The former lacks the support for a less proviledge subject,and the latter has a known covert channels.In this paper,a model called generalized taint propagation model(GTPM) is proposed to protect the confidentiality and integrity of operating systems.It inherits the least privilege characteristic of taint propagation model(TPM),expands the semantics of TPM to close the known covert channels,and introduces declassification and decontamination capacities of subjects to avoid accumulating contamination.The paper also introduces its specification using communicating sequential processes(CSP) language to clear the formal semantics of a GTPM operating system's behaviors of information flow control;Moreover,the study noninterference with declassification in CSP verification model of process equivalence,and proves that abstract GTPM system have the security property of noninterference with declassification in virtue of FDR tool.Finally,this paper uses an example to demonstrate its improvement of availability.

Security Analysis of Mandatory Access Control Model

Mandatory Access Control Modeling and Security Analysis: A Petri-Nets Based Method

Using Petri Nets to Verify Access Policies in Mandatory Access Control Model

Model Checking for Verification of Mandatory Access Control Models and Properties.

Research on Information Security Model and Security System Design

Multi-level Access Control for Collaborative CAD

Hybrid Mandatory Model Composed of BLP and Clark-Wilson Policy

Dynamic Security Access Control Model Based on System Reliability

Study and Improvement of MAC(Mandatory Access Control) for Windows

Dynamically modified union model combining confidentiality and integrity

Mandatory Access Control Mechanism of Executable Program under LSM

Context-sensitive Access Control Model and Implementation

Generalized Taint Propagation Model for Access Control in Operation Systems

A Time and Mutable Attribute-Based Access Control Model.

Property Verification for Generic Access Control Models

A Path-History-sensitive Access Control Model for Mobile Agent Environment

Object-based Multi-Subject Access Control Model

OBJECT-BASED ACCESS CONTROL MODEL

Research of User Access Control for Networked Manufacturing System

Implementation and Performance Analysis of Multilevel Security System in Pervasive Computing Environment

FORMAL SECURITY DATABASE SYSTEM ACCESS MODEL