Policy Analysis Methods and Tools of Information Flow Model Based on TCB Integrity
Hu We · Journal of Wuhan University · 2013
TCB integrity protection is of great significance.The static measurement method is not perfect,and the dynamic measurement method is still immature,so a policy-based method to analyze the integrity of the system TCB and domain TCB is proposed.This method parses the system policy file into the form of information flow,and then abstracts it out into the form of directed graph.At last the information flow of the graph is analyzed using graph theory,and the information flow propagation path of the integrity violation is given.The idea of this method can be used in any situations where performed operations will produce information flow.Based on this method,aprototype tool is developed.In the experiment,the integrity of TCB in the SELinux operation system is studied.The experiment indicates that the tool can analyze the information flow of the policy file,and give the policy violation graph in real time.This method and tool can be an effective complement of existing integrity measurement methods.