Research on confidential level extended BLP model

Abstract

The rule of "No-Down-Write" of BLP model restrict its applying in application system because "Down-Write" is often necessary in real life. A new access control model based on Confidential level extended BLP model was researched because of the conflicts. A range of Confidential level is given to the subjects and a confidential rule set is established to endow the subject with the capability of writing down in a bound when it satisfied the confidential rules. The model enforces MAC. The definitions, security check rules, axioms of the model are illustrated in the paper. The model was applied in a multilevel secure DBMS development. The implementation is introduced in short at last. © Springer-Verlag Berlin Heidelberg 2005.