Dynamic Determination Scheme of Subject′s Integrity Level and its Correctness Proof
Hui Liu · Journal of Chinese Computer Systems · 2011
Strict Integrity Policy(SIP) of Biba model can be used to maintain the integrity of data in computer systems,but it might deny some non-malicious access requirements and hence decreases the compatibility of applications.A dynamic determination scheme of subject′s integrity level which based on the subject′s history behavior is presented,which can increase the compatibility of the software while keeping system integrity as strictly as SIP can.And the proof of it is also given,which shows that the improved SIP is secure.The security risk of the existing improved SIP which is resolved in our scheme is indicated by an example after comparison and analysis,and the main reason which leads to this phenomenon is also demonstrated.