基于信任及风险的访问控制模型研究与系统实现

发布时间：2018-03-14 00:25

本文选题：基于角色的访问控制　切入点：信任　出处：《东北大学》2014年硕士论文　论文类型：学位论文

【摘要】：随着信息技术的快速发展,信息技术在各个方面影响着人们的生活。与此同时,信息安全问题也成为制约其发展的重要问题。如何保证能够为合法用户按需提供优质的服务,同时又能阻止非法用户的访问或合法用户的非法访问已成为信息安全领域的重要课题。因此,设计一种安全合理的访问控制模型,对保障信息安全有着重要的理论意义和现实意义。本文在对基于角色的访问控制技术研究的基础上,结合信任管理和风险管理的相关技术,对传统的访问控制模型进行改进,提出了基于信任和风险控制的访问控制模型。通过信任和风险两个元素对访问进行控制,从整体上增强了访问控制模型的安全性。论文的主要研究内容如下：(1)针对基于角色的访问控制模型中存在角色和权限的静态分配问题,结合信任和风险的相关技术,提出了基于信任及风险的访问控制模型。(2)分析了Beth和J(?)sang两种信任值算法存在的主观性过强,动态性不足的缺陷,提出了一种动态适应的信任值计算方法,并通过仿真实验验证了动态适应算法及其惩罚因子、服务等级因子的性能。(3)研究当前计算风险的相关方法,分析影响风险的因素,基于BP神经网络构建了风险评估模型,并对BP神经网络计算风险值的准确性进行了验证。论文通过仿真实验和系统实现后的运行结果验证了文中分析方法的正确性和有效性,表明研究内容具有一定的实用价值。
[Abstract]:With the rapid development of information technology, information technology affects people's lives in all aspects. At the same time, the problem of information security has become an important problem that restricts the development of information technology. At the same time, it has become an important subject in the field of information security to prevent illegal users' access or legitimate users' access. Therefore, a secure and reasonable access control model is designed. It has important theoretical and practical significance to ensure information security. Based on the research of role-based access control technology, this paper improves the traditional access control model by combining the related technologies of trust management and risk management. An access control model based on trust and risk control is proposed. The main contents of this paper are as follows: 1) aiming at the problem of static assignment of roles and permissions in role-based access control model, combining the technologies of trust and risk. An access control model based on trust and risk is proposed. Two trust value algorithms have the defects of being too subjective and lacking in dynamics. This paper proposes a dynamic adaptive trust value calculation method, and verifies the dynamic adaptation algorithm and its penalty factor through simulation experiments. The performance of the service grade factor. (3) studying the current risk calculation methods, analyzing the factors affecting the risk, and constructing the risk assessment model based on BP neural network. The accuracy of the BP neural network in calculating the risk value is verified. The correctness and validity of the analysis method are verified by the simulation experiment and the running result of the system, which shows that the research content has certain practical value.
【学位授予单位】：东北大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.08

【相似文献】