XACML的移动应用安全策略及测试方法

发布时间：2018-03-24 06:38

本文选题：BYOD　切入点：安全　出处：《计算机科学》2017年11期

【摘要】：随着移动互联网技术的发展,具有计算功能的移动终端被大量部署,并在大量移动应用的支撑下完成各项任务;愈来愈多的企业允许员工带着他们的个人设备进入工作环境(BYOD模式)。但不同的人员有不同的角色,不同的资源有不同的访问权限,敏感资源一旦被泄露,将可能给企业带来重大的损失。因此,要想全面支持BYOD,保障数据和系统的安全,需要相应移动应用对敏感资源的访问控制进行明确的规定,并在移动应用运行过程中执行。XACML是访问控制策略的统一描述语言,但目前还未见其对移动应用和BYOD的支持。提出基于XACML语言描述移动应用的访问控制策略,研究XACML访问控制策略的测试方法;在此基础上,面向BYOD,针对Android平台上的项目管理APP进行了实例研究,结果展示了所提方法的有效性。
[Abstract]:With the development of mobile Internet technology, mobile terminals with computing functions are deployed in large numbers, and under the support of a large number of mobile applications to complete the tasks; More and more enterprises allow employees to bring their personal equipment into the work environment. But different people have different roles, different resources have different access rights, and sensitive resources are leaked. Therefore, in order to fully support BYODD and ensure the security of data and systems, it is necessary for mobile applications to clearly regulate the access control of sensitive resources. XACML is the unified description language of access control policy, but its support for mobile application and BYOD has not been found yet. An access control policy based on XACML language is proposed to describe mobile application. This paper studies the testing method of XACML access control policy, and on this basis, a case study of project management APP based on Android platform is carried out, and the results show the effectiveness of the proposed method.
【作者单位】：全球能源互联网研究院信息通信研究所;信息网络安全国网重点实验室;
【基金】：面向电力移动终端的应用测试技术研究(5455HT150029)资助
【分类号】：TP309

【相似文献】