基于标签的策略管理系统设计与实现

发布时间：2018-12-07 13:43

【摘要】：随着计算机技术的蓬勃发展和网络应用的推广,人们在享受互联网带来的诸多便利的同时,安全需求也在发生变化。人们对信息的处理更倾向于电子化,为了预防来自系统内外的威胁,系统不仅要求保密性,而且还要求信息的完整性。这些变化使得保障数据安全问题日益凸显,一些访问控制需求难以用传统的DAC和MAC来描述和管理,因此有必要研究更加完善的访问控制方法,对用户访问的应用服务与资源过程进行管理,制定更为精细的策略来控制信息流动,维护信息安全,与此同时需要加强安全策略信息的管理,实现策略实时匹配,为上述过程提供保障。针对上述问题,本文提出并设计了一种基于标签的策略管理系统解决方案,主要工作包括:(1)深入调研并分析了现今相关的访问控制架构模型,设计服务和用户等的标签生成、分类验证方法;(2)提出了基于标签的策略管理系统解决方案;(3)设计并实现了基于标签的策略管理系统,可以在保证系统性能、安全、可靠的同时,实现高效、快速的策略匹配过程;(4)针对实际应用情况对基于标签的策略系统搭建了系统测试环境,并进行了详细的测试评估。经过详细的功能验证和性能的测试,测试结果表明,本文所提出的方案能够实时更新访问控制策略,策略管理系统能够很好地管理系统用户对服务的访问行为,同时系统性能方面没有因为用户的增加产生明显的影响。
[Abstract]:With the rapid development of computer technology and the popularization of network application, people enjoy many conveniences brought by the Internet, and the security requirements are also changing. People tend to process information electronically. In order to prevent threats from inside and outside the system, the system requires not only confidentiality, but also the integrity of information. These changes make the problem of ensuring data security increasingly prominent, some access control requirements are difficult to describe and manage by traditional DAC and MAC, so it is necessary to study more perfect access control methods. The process of application service and resources accessed by users is managed, and a more precise strategy is formulated to control the flow of information and maintain information security. At the same time, it is necessary to strengthen the management of security policy information and realize real-time policy matching. To provide security for the above process. In view of the above problems, this paper proposes and designs a policy management system solution based on label. The main work includes: (1) deeply research and analyze the current access control architecture model. Design service and user label generation, classification verification method; (2) the solution of policy management system based on label is put forward. (3) the policy management system based on label is designed and implemented, which can ensure the performance, security and reliability of the system and realize the efficient and fast policy matching process. (4) based on the practical application, the system testing environment is built and the detailed test evaluation is carried out. After detailed functional verification and performance testing, the test results show that the proposed scheme can update the access control strategy in real time, and the policy management system can manage the access behavior of the users to the service. At the same time, the performance of the system has no obvious impact because of the increase in the number of users.
【学位授予单位】：北京邮电大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP311.52

【参考文献】