Abstract:High security level trusted information system need formal model of security policies to gain adequate assurance. Security domain separation based on DTE policy is one of the basic technologies to build trusted system. But the current DTE systems are difficult to assure their security, because they have no explicit security objective, their policy configuration is too complex, and there are no formal specification and formal verification of security properties on these systems or their policies. A security domain separation model based on DTE policy is formalized. It defines system state and adopted least privilege as domain separation principle. It extends original DTE policy, defines authorized information flow and pipeline information flow as two new invariants based on information flow analysis. Then system secure state is given and formal analysis by proven theorem is adopted to verify system security. The model is specified using the Z formal language and verified with the help of Z?EVES tool. The model has been implemented in the ANSHENG V4.0 security operation system and a Web server example is given. The work will also facilitate policy analysis and management of SELinux. This formal model resolves the formalization problem of DTE system and provids the foundation for security domain separation implementation and verification.

Research of Network Security Policy Based on Domain

Study on the Security Policy Management Framework in Multi-domain Environment

Research on Information Security Model and Security System Design

Research on key technologies of network security management policy

Research of United Platform of Network Security Management Model

A Dynamic and Self-Adaptive Network Security Policy Realization Mechanism

Network security policy for large-scale VPN

A Network Security Policy Self-Adaptive Management And Distribution Model In Complex Network Environment

Research On Modeling For Network Security Policy Confliction Based On Network Topology

Policy-Tree Based Proactive Defense Model For Network Security

A Model Based on Domain for Access Control Policy Refinement and Its Implementation

A Security Domain Separation Z Model Based on DTE Policy

Policy Based Network Security System

Research and Application of Network Security Interaction Model

Survey Paper: A survey on policy languages in network and security management

Research of Security Policy Model in Application Security Platform

Model for access control policy refinement based on domain and its implementation

Model Approach to Security Audit Domain

Multi-Level network security architecture

Open Management of Network Security Analoging Social Public Security Systems

Modeling on Policy Conflict for Managing Heterogeneous Security Systems in Distributed Network Environment