A Method of Classifi ed Information System Boundary Protection based on Defi ning Security Domain and Interface Segregation
LI Ying-ta · Xinxi wangluo anquan · 2014
To satisfy the interconnection requirements of classified information system, defining different security domains can make each domain's responsibility very clearly. We propose a method that is helpful to select proper security domain boundary protection policy and exchange information between different security domains. Then we propose a method to protect the boundary of security domains based on interface segregation and unifi cation, this method can decrease the cost of classifi ed information system's management and enhance the security of classifi ed information system.