Specifying and Enforcing a Fine-Grained Information Flow Policy: Model and Experiments
Specifying and Enforcing a Fine-Grained Information Flow Policy: Model and Experiments
复制标题
指定和实施细粒度信息流策略：模型和实验
DOI：
10.22667/jowua.2010.06.31.056
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
L. Mé
中科院分区：
文献类型：
--
作者：
Valérie Viet Triem Tong;A. Clark;L. Mé
在本文中，我们提出了一个模型，用于定义和执行细粒度的信息流策略。我们描述了如何在典型的计算机上执行策略，并使用所提出的模型进行实验。该模型的一个关键特征是它允许表达规则，这些规则精确地详细说明了哪些信息元素可以混合在一起。例如，该模型允许表达一项政策，该政策禁止医生混合患者的个人医疗细节。执行机制跟踪和记录系统内的信息流，以便可以对策略的动态更改，以相对于可能传播到系统中不同位置的信息元素。
In this paper we present a model for defining and enforcing a fine-grained information flow policy. We describe how the policy can be enforced on a typical computer and present experiments using the proposed model. A key feature of the model is that it allows the expression of rules which detail precisely which information elements are allowed to mix together. For example, the model allows the expression of a policy which forbids a doctor from mixing the personal medical details of the patients. The enforcement mechanisms tracks and records information flows within the system so that dynamic changes to the policy can be made with respect to information elements which may have propagated to different locations in the system.