Quantitative Analysis Method to BLP Model
Xing Zhang · Journal of Chinese Computer Systems · 2009
BLP model is the most classical model in mandatory access control,it is based on a multi-level information flow policy to implement access control.However,the information flow policy of BLP model does not support downward information flow from high security level to low security level.This paper proposed an analysis method based on the conditional entropy which gives quantitative analysis to the security of BLP model.With this analysis method,we can define the confidentiality of an information system with secure thresholds defined by confidential information and its conditional entropy.We proved that under certain condition,a downward information flow won't let the system be not secure.