基于文件过滤驱动的矢量地图访问控制研究

发布时间：2018-02-27 04:03

本文关键词： 矢量地图访问控制 RBAC 文件过滤驱动　出处：《哈尔滨工程大学》2012年硕士论文　论文类型：学位论文

【摘要】：电子地图是计算机和网络迅速发展所得到的产物，它逐渐改变着人们的生活、出行方式，并且带来了更多的便捷。矢量地图作为电子地图的一种，在城市的数字化建设、交通管理、地理信息搜索引擎以及军事领域起到举足轻重的作用。矢量地图制作费用高昂且易于分发，因此当重要的商业或者军事矢量地图被窃取或篡改时，将会带来巨大的损失。因此即便是矢量地图有着高精度定位、无损缩放等优良特性，在某些场合依然不能替代纸质地图，典型例子如军事战略地图。限制矢量地图使用的并不是地图本身因素，，而是在这些特定的应用对地图数据安全性的要求更加严格。本文从文件的安全访问控制入手，研究传统的安全访问控制模型的适用性与优缺点。分析基于角色的访问控制模型在实际应用中的困难之处，在此基础上对其进行改进。提出更加适用于矢量地图安全保护的RBAC访问控制模型，使非法用户不能获得受保护文件的内容。通过对矢量地图的数据结构进行详细的分析，结合第三方软件分析矢量地图的操作方式与流程。根据使用过程中用户对地图操作程度的不同，确定不同访问主体的访问权限。根据矢量地图的重要程度确定访问客体的级别属性，实现文件分级与访问控制相结合。文件过滤驱动是本课题实现的基础，内核模式的过滤驱动程序拦截文件操作，进一步提高访问控制的强度。通过文件过滤驱动与Hook技术相结合，使访问粒度达到单个文件，同时避免授权用户的越权操作。
[Abstract]:Electronic map is the result of the rapid development of computer and network, it is gradually changing people's life, travel mode, and brought more convenience. Vector map, as a kind of electronic map, in the city of digital construction, Vector maps are expensive and easy to distribute, so when important commercial or military vector maps are stolen or tampered with, So even if vector maps have high accuracy, lossless scaling, and so on, they can't replace paper maps in some cases. Typical examples, such as military strategic maps, limit the use of vector maps not because of the map itself, but because of the more stringent requirements for map data security in these specific applications. In this paper, the applicability, advantages and disadvantages of the traditional secure access control model are studied, and the difficulties of the role-based access control model in practical application are analyzed. An RBAC access control model, which is more suitable for vector map security protection, is proposed to make illegal users unable to obtain the contents of protected files. Through the detailed analysis of the data structure of vector map, combined with the third party software to analyze the operation mode and flow of vector map. According to the importance of vector map, the level attribute of access object is determined, and the combination of file classification and access control is realized. The file filter driver is the foundation of this subject. The kernel mode filter driver intercepts the file operation, further improves the intensity of access control. Through the combination of file filter driver and Hook technology, the access granularity can reach a single file. At the same time, avoid the authorized user's ultra vires operation.
【学位授予单位】：哈尔滨工程大学
【学位级别】：硕士
【学位授予年份】：2012
【分类号】：TP393.08

【参考文献】