Study on the Safety Problem of Access Matrix Models

访问矩阵模型的安全问题研究

• 批准号: 13680405
• 负责人: SOSHI Masakazu
• 金额: $ 1.28万
• 依托单位: Japan Advanced Institute of Science and Technology
• 依托单位国家: 日本
• 项目类别: Grant-in-Aid for Scientific Research (C)
• 财政年份: 2001
• 资助国家: 日本
• 起止时间: 2001 至 2002
• 项目状态: 已结题
• 来源: https://kaken.nii.ac.jp/grant/KAKENHI-PROJECT-13680405/
• 关键词: computer security; access control; access matrix models; safety problem; anonymity; model; complexity theory; システム設計・解析; 非単調システム; 決定可能性

The safety problem in access matrix models is the one to determine whether or not a given subject can eventually obtain an access privilege to a given object. Generally speaking, unfortunately, the safety problem is undecidable. Little is known about protection systems for which the safety problem is decidable, except for strongly constrained systems (e.g., monotonic systems). Therefore, we propose the Dynamic-Typed Access Matrix (DTAM) Model, which extends Typed Access Matrix model of Sandhu by allowing the type of an object to change dynamically. DTAM model has an advantage that it can describe non-monotonic protection systems for which the safety problem is decidable. Especially, with further restrictions, we can show that the problem becomes NP-hard. In this research we formally define DTAM model and then discuss various aspects of it thoroughly.

访问矩阵模型中的安全问题是确定给定主体最终是否能够获得对给定对象的访问权限的问题。总的来说，不幸的是，安全问题是不可决定的。除了强约束系统（例如，单调系统）。因此，我们提出了动态类型访问矩阵（DTAM）模型，它扩展了Sandhu的类型访问矩阵模型，允许对象的类型动态变化。DTAM模型的优点是可以描述安全问题可判定的非单调保护系统。特别是，随着进一步的限制，我们可以证明，该问题成为NP-难。在本研究中，我们正式定义了DTAM模型，然后深入讨论了它的各个方面。

项目成果

S.Kitazawa, M.Soshi, A.Miyaji: "An Agent-Based Model of Anonymous Communication Protocols"IEEE International Workshops on Enabling Technologies : Infrastructure for Collaborative Enterprise (WETICE2001). 177-182 (2001)

S.Kitazawa、M.Soshi、A.Miyaji：“基于代理的匿名通信协议模型”IEEE 国际启用技术研讨会：协作企业基础设施 (WETICE2001)。

早稲田, 双紙, 宮地: "鍵の非共有と共謀関係を考慮した共謀問題のモデル化"電子情報通信学会技術報告 ISEC. 2001・80. 9-15 (2001)

早稻田、Soshi、Miyaji：“考虑关键非共享和共谋关系的共谋问题建模”IEICE 技术报告 ISEC 2001・80 (2001)。

T.Ogiso, Y.Sakabe, M.Soshi, A.Miyaji: "Software Obfuscation on a theoretical basis and its implementation"IEICE Trans. Fundamentals. (2003)

T.Ogiso、Y.Sakabe、M.Soshi、A.Miyaji：“软件混淆的理论基础及其实现”IEICE Trans。

T.Ogiso, Y.Sakabe, M.Soshi, A.Miyaji: "Software Tamper Resistance Based on the Difficulty of Interprocedural Analysis"The Third International Workshop on Information Security Applications (WISA 2002). 437-452 (2002)

T.Ogiso、Y.Sakabe、M.Soshi、A.Miyaji：“基于过程间分析难度的软件防篡改”第三届信息安全应用国际研讨会（WISA 2002）。