|
|
|
题名
|
作者
|
年代
|
出处
|
被引量
|
| 1 | A formal model for access control with supporting spatial context显示文摘There is an emerging recognition of the importance of utilizing contextual informa tion in authorization decisions. Controlling access to resources in the field of wireless and mobile networking require the definition of a formal model for access control with supporting spatial context. However, traditional RBAC model does not specify these spatial requirements. In this paper, we extend the existing RBAC model and propose the SC-RBAC model that utilizes spatial and location-based information in security policy definitions. The concept of spatial role is presented, and the role is assigned a logical location domain to specify the spatial boundary. Roles are activated based on the current physical position of the user which obtained from a specific mobile terminal. We then extend SC-RBAC to deal with hierarchies, modeling permission, user and activation inheritance, and prove that the hierarchical spatial roles are capable of constructing a lattice which is a means for articulate multi-level security policy and more suitable to control the information flow security for safety-critical location-aware information systems. Next, constrained SC-RBAC allows express various spatial separations of duty constraints, location-based cardinality and temporal constraints for specify fine-grained spatial semantics that are typical in location-aware systems. Finally, we introduce 9 invariants for the constrained SC-RBAC and its basic security theorem is proven. The constrained SC-RBAC provides the foundation for applications in need of the constrained spatial context aware access control. | ZHANG Hong HE YePing SHI ZhiGuo | 2007 | Science in China(Series F)2007，50，3： | 7 |
| 2 | A formal model for integrity protection based on DTE technique显示文摘In order to provide integrity protection for the secure operating system to satisfy the structured protection class' requirements, a DTE technique based integrity protection formalization model is proposed after the implications and structures of the integrity policy have been analyzed in detail. This model consists of some basic rules for configuring DTE and a state transition model, which are used to instruct how the domains and types are set, and how security invariants obtained from initial configuration are maintained in the process of system transition respectively. In this model, ten invariants are introduced, especially, some new invariants dealing with information flow are proposed, and their relations with corresponding invariants described in literatures are also discussed. The thirteen transition rules with well-formed atomicity are presented in a well-operational manner. The basic security theorems correspond to these invariants and transition rules are proved. The rationalities for proposing the invariants are further annotated via analyzing the differences between this model and ones described in literatures. At last but not least, future works are prospected, especially, it is pointed out that it is possible to use this model to analyze SE-Linux security. | JI Qingguang QING Sihan HE Yeping | 2006 | Science in China(Series F)2006，49，5： | 4 |
| 3 | A secure and rapid response architecture for virtual machine migration from an untrusted hypervisor to a trusted one显示文摘 | Tao WU Qiusong YANG Yeping HE | 2017 | Frontiers of Computer Science2017，11，5： | 1 |
| 4 | Variations of temperature, salinity and current in the southern tidal passage of the Hangzhou Bay, China显示文摘Field surveys covering a spring-neap tidal period were conducted to investigate the characteristics of tidal dynamics within a curved channel in the southern Hangzhou Bay, China. The channel has a maximum depth of more than 100 m with an average tidal range of 2.5 m, serving as the main tidal passage in the southern part of the Hangzhou Bay. Water salinity, temperature and velocity data were collected from the ship-based transects and mooring measurements. During flood tide, the tidal current intrudes into the Hangzhou Bay through the northern side of the channel with a maximum velocity of about 2 m/s, while retreats through the southern side during ebb tide with a maximum velocity of 1.8 m/s. Due to the pressure, density gradients, the Coriolis force and centrifugal effect, a lateral exchange flow is generated as the tidal current relaxes from flood to ebb. Salinity and temperature data show that the water in the channel is weakly stratified during both spring and neap tides in summer time.However, mixing in the middle region will be enhanced by the lateral circulation. Mooring data indicate that the temperature and salinity are varying at a frequency similar to tidal current but higher than sea level oscillation.Our results support the hypothesis that the high frequency salinity and temperature variations could be generated by combination of the tidal current and the lateral exchanging flow. | HE Zhiguo HUANGFU Kailong YUAN Yeping SONG Dan LI Li | 2016 | Acta Oceanologica Sinica2016，35，3： | 1 |
您所在的机构暂未开通此部分的功能，请联系管理员