Extended Chinese Wall Model for Aggressive Data Leakage Prevention
Author:
Affiliation:

Clc Number:

Fund Project:

  • Article
  • |
  • Figures
  • |
  • Metrics
  • |
  • Reference
  • |
  • Related
  • |
  • Cited by
  • |
  • Materials
  • |
  • Comments
    Abstract:

    The Chinese wall model combines discretionary and mandatory aspects of access control. Hence it is widely used in commercial environments to prevent information flows from competing companies with conflicting of interests to the same consultant. However, the model gives strong constraints on both reads and writes, so it is too restrictive to be employed in a practical system. Especially for data leakage prevention (DLP), the applications not play to its advantages. This paper reconsiders the conflict of interest from the perspective of the data object and put forward the concept of aggressive conflict of interest relation. The new relation extends the constraints on two-way information flow to that of one-way flows. Based on this, the paper presents an aggressive Chinese wall model (ACWM) for initiative data leakage prevention and gives the formal description of the model as well as the related proof of the theorem. The final analysis shows that, ACWM achieves the same security goal as traditional Chinese wall models, and also provides more flexible constraints which are efficient for DLP.

    Reference
    Related
    Cited by
Get Citation

马俊,王志英,任江春,伍江江,程勇,梅松竹.一种实现数据主动泄漏防护的扩展中国墙模型.软件学报,2012,23(3):677-687

Copy
Share
Article Metrics
  • Abstract:
  • PDF:
  • HTML:
  • Cited by:
History
  • Received:April 30,2010
  • Revised:August 27,2010
  • Adopted:
  • Online: March 05,2012
  • Published:
You are the firstVisitors
Copyright: Institute of Software, Chinese Academy of Sciences Beijing ICP No. 05046678-4
Address:4# South Fourth Street, Zhong Guan Cun, Beijing 100190,Postal Code:100190
Phone:010-62562563 Fax:010-62562533 Email:jos@iscas.ac.cn
Technical Support:Beijing Qinyun Technology Development Co., Ltd.

Beijing Public Network Security No. 11040202500063