Improved BLP Model Based on User Intension
Hongjun He · 2006
In the design and implementation of the current security systems based on BLP model,subject’s security label and access right inherit from the user’s.This may enlarge the access ability which violates the least privilege theorem and give the malious subject the chance to gain higher security label and more rights to steal and damage information.To solve this problem,the paper presents an improved BLP model based on user’s intention——IB_BLP model.In the new model,subject needs to get user’s intention to meet the least privilege theorem while accessing object.