二维降密策略内联引用监控方法.PDF

Vo1. 43 No. 11A 第 43 卷第11A 期 计算机科学 2016 年 11 月 Computer Science Nov 2016 二维降密策略的内联引用监控方法 朱浩1 ， 2 陈建平1 金丽3 (南通大学计算机科学与技术学院 南通 226019)1 (南京航空航天大学计算机科学与技术学院 南京 210016)2 (南通大学电子信息学院 南通 226019)3 摘 要 降密策略的静态实施机制存在限制性过强的缺陷，基于虚拟机的动态监控机制不能完全适合Web 和即时编 译环境。为此，基于内联引用监控方法，实施了基于内容和地点维度的二维降密策略。提出了内联引用监控方法的程 序变形规则，并证明了该方法的可靠性;根据该程序变形规则，将源程序进行变形重写，生成一个新的程序，它能脱离 外部监控环境，实现自我监控。 关键词 降密策略，监控，内联引用，无干扰 中固法分类号 TP311 文献标识码 A In-lined Reference Monitor Method of Tw(• dimension Information Release Policy ZHU Hao12 CHEN Jian-ping 1 J卧~ Li3 . CSchool of Computer Science and Technology ,Nantong University ,Nantong 226019 ,China)1 CSchool of Computer Science and Technology ,Nanjing University of Aeronautics and Astronautics ,Nanjing 210016 ,China)2 CSchool of Electronics and Information ,Nantong University ,Nantong 226019 ,China) 3 Abstract The static enforcement methods of dec!assification policies are over-restrictive. Dynamic approaches based on virtual machines are not suited to Web and just-in-time compiling environments completely. To this end ,a two-dimen- sion declassification policy based on the dimension of WHAT and WHERE was enforced by in-lined reference monitor method The transformation rules of in-lined reference monitor method were presented , and the soundness of the rules was proved. According to transformation rules of the program , the source program is transformed and rewritten to a new program ,which is independent of exter