Improvement of BLP Model and Implementation in LSM of Linux
Lei Qian-rui · Modern Computer · 2009
BLP model is the most widely recognized MLS model. However, it is just focused on the confidentiality of system, neglecting the integrity. Develops a scheme for enhancing integrity of BLP model. The character of the scheme is to add a dynamic integrity evaluating level to limit the authorization of up according to the level. For user processes with high level , a complete write up authorization is given, for user processes with normal level, a neighbouring write up authorization is given, and for user processes with low level, the up authorization is deprived. Gives a detailed analysis for the security of BLP model to illustrate the integrity of the improved model enhanced greatly indeed, puts the security policy of the improved model into the Linux Security Model to implement and verify and a conclusion of the improved model having a all-right security and availability is educed.