Research and Application of Rigorous Access Control Mechanism in Distributed Objects System
Research and Application of Rigorous Access Control Mechanism in Distributed Objects System
复制标题
分布式对象系统严格访问控制机制的研究与应用
DOI：
--
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
Zheng Changyou
中科院分区：
文献类型：
--
作者：
Zhang Sai;Zheng Changyou
安全是现代软件系统不可缺少的组成部分。目前的软件系统建模主要是指系统需求、结构、组件和部署等方面的建模，而忽略了安全方面的建模。在系统发展的后期，系统安全策略和机制往往被视为对系统的补充和完善。这种对安全需求的不规范处理，给系统后期的安全维护和系统集成带来了很大的隐患。本文重点描述了系统开发各个阶段产生的访问控制机制。采用适当的方法来描述各个阶段的访问控制。系统设计阶段中描述的访问控制将映射到XACML规范，并部署到实施基础结构中。最后，对用户请求的决定将通过Sun的XACML实现做出。
Security is an indispensable part of modern software system. Current software system modeling mainly refers to system requirements, structure, components and deployment modeling, while ignoring the security aspects of modeling. System security strategy and mechanism are often taken as the supplement and improvement to system in the later period of its development. This kind of nonstandard processing of security requirements brings great hidden danger for the system in later security maintenance and system integration. This paper focuses on the description of access control mechanisms generated from various stages of system development. Appropriate methods are adopted to describe access control at all phrases. The access control described in system design phrase will be mapped to XACML specification and deployed into the enforcement infrastructure. Finally, the decisions for users’ requests will be made through Sun’s XACML Implementation.